id: "GV.OC-03" title: "Organizational Context" function: "GV" function_name: "Govern" category: "GV.OC" category_name: "Organizational Context" description: "Cybersecurity risk management is integrated into enterprise risk management." controls: - PM-1 - PM-11 - PM-2 - PM-3 - PM-8 - PM-9

GV.OC-03: Organizational Context

Description

Cybersecurity risk management is integrated into enterprise risk management.

Category Context

Function: GV — Govern Category: GV.OC — Organizational Context

The organization's mission, stakeholder expectations, legal/regulatory requirements, and risk appetite are understood and inform cybersecurity risk management.

Mapped SP 800-53 Controls