← NIST CSF 2.0 in plain English

GV.OC-02

Govern / Organizational Context

Internal and external stakeholders are understood, and their needs and expectations regarding cybersecurity risk management are understood and considered.

Think of it likeConsidering the needs of everyone in the household when making safety plans.

In plain English

The family asks each person, from a nervous grandparent to a teen who wants privacy, what would make them feel safe, and builds those answers into the safety plan instead of guessing.

Related CIS safeguards (unofficial mapping)

No direct mapping.