← NIST CSF 2.0 in plain English

ID.RA-04

Identify / Risk Assessment

Potential impacts and likelihoods of threats exploiting vulnerabilities are identified and recorded.

Think of it likeEvaluating the risk of a fire starting from a frayed electrical cord.

In plain English

The family assesses how likely it is that something bad will happen, like a fire from faulty wiring, and how serious the consequences would be.