← NIST CSF 2.0 in plain English

GV.RM-01

Govern / Risk Management Strategy

Risk management objectives are established and agreed to by organizational stakeholders.

Think of it likeThe family sits down together and agrees on their safety goals for the home.

In plain English

The family discusses and agrees on what they want to achieve with home safety, like how secure the house should be and what matters most to protect, so everyone is working toward the same goals.