---

id: "GV.RR-02" title: "Roles and Responsibilities" function: "GV" function_name: "Govern" category: "GV.RR" category_name: "Roles and Responsibilities" description: "Cybersecurity responsibilities are assigned, documented, and communicated." controls: - AT-1 - AT-2 - PM-1 - PM-11 - PM-2

---

GV.RR-02: Roles and Responsibilities

Description

Cybersecurity responsibilities are assigned, documented, and communicated.

Category Context

Function: GV — Govern Category: GV.RR — Roles and Responsibilities

Cybersecurity roles, responsibilities, and authorities are established and communicated.

Mapped SP 800-53 Controls

• AT-1 (Awareness and Training) — View Control
• AT-2 (Awareness and Training) — View Control
• PM-1 (Program Management) — View Control
• PM-11 (Program Management) — View Control
• PM-2 (Program Management) — View Control