---

id: "ID.RA-10" title: "Risk Assessment" function: "ID" function_name: "Identify" category: "ID.RA" category_name: "Risk Assessment" description: "Criticality of services and assets is evaluated." controls: - CP-2 - PM-11 - PM-8 - RA-2 - RA-3

---

ID.RA-10: Risk Assessment

Description

Criticality of services and assets is evaluated.

Category Context

Function: ID — Identify Category: ID.RA — Risk Assessment

Cybersecurity risks are identified, assessed, and prioritized.

Mapped SP 800-53 Controls

• CP-2 (Contingency Planning) — View Control
• PM-11 (Program Management) — View Control
• PM-8 (Program Management) — View Control
• RA-2 (Risk Assessment) — View Control
• RA-3 (Risk Assessment) — View Control