← NIST CSF 2.0 in plain English

GV.RM-07

Govern / Risk Management Strategy

Strategic opportunities (i.e., positive risks) are characterized and are included in organizational cybersecurity risk discussions.

Think of it likeDeciding whether to invest in home improvements.

In plain English

The family weighs the benefits of making improvements to the house, like adding solar panels, to decide if the potential benefits are worth the cost.