---

id: "ID.IM-03" title: "Improvement" function: "ID" function_name: "Identify" category: "ID.IM" category_name: "Improvement" description: "Lessons learned are incorporated into risk management processes." controls: - CA-2 - CA-5 - CA-7 - PM-6 - PM-9 - RA-3

---

ID.IM-03: Improvement

Description

Lessons learned are incorporated into risk management processes.

Category Context

Function: ID — Identify Category: ID.IM — Improvement

Improvements to the organization's cybersecurity risk management processes are identified and implemented.

Mapped SP 800-53 Controls

• CA-2 (Assessment, Authorization, and Monitoring) — View Control
• CA-5 (Assessment, Authorization, and Monitoring) — View Control
• CA-7 (Assessment, Authorization, and Monitoring) — View Control
• PM-6 (Program Management) — View Control
• PM-9 (Program Management) — View Control
• RA-3 (Risk Assessment) — View Control