---

id: "ID.RA-03" title: "Risk Assessment" function: "ID" function_name: "Identify" category: "ID.RA" category_name: "Risk Assessment" description: "Threats, vulnerabilities, likelihoods, and impacts are used to determine risk." controls: - RA-3 - RA-5 - RA-7

---

ID.RA-03: Risk Assessment

Description

Threats, vulnerabilities, likelihoods, and impacts are used to determine risk.

Category Context

Function: ID — Identify Category: ID.RA — Risk Assessment

Cybersecurity risks are identified, assessed, and prioritized.

Mapped SP 800-53 Controls

• RA-3 (Risk Assessment) — View Control
• RA-5 (Risk Assessment) — View Control
• RA-7 (Risk Assessment) — View Control