← NIST CSF 2.0 in plain English

GV.RM-02

Govern / Risk Management Strategy

Risk appetite and risk tolerance statements are established, communicated, and maintained.

Think of it likeDeciding the kids can bike to the corner store but not across the highway, drawing the line on how much risk is acceptable.

In plain English

The family agrees on how much risk they are willing to take, like when children can play outside alone, and everyone follows these rules.

Related CIS safeguards (unofficial mapping)

No direct mapping.