id: "GV.OC-01" title: "Organizational Context" function: "GV" function_name: "Govern" category: "GV.OC" category_name: "Organizational Context" description: "The organizational context is understood and informs cybersecurity roles, responsibilities, and risk management activities." controls: - AC-1 - PM-1 - PM-11 - PM-2 - PM-3 - PM-8 - PM-9

GV.OC-01: Organizational Context

Description

The organizational context is understood and informs cybersecurity roles, responsibilities, and risk management activities.

Category Context

Function: GV — Govern Category: GV.OC — Organizational Context

The organization's mission, stakeholder expectations, legal/regulatory requirements, and risk appetite are understood and inform cybersecurity risk management.

Mapped SP 800-53 Controls