← NIST CSF 2.0 in plain English

GV.RR-04

Govern / Roles, Responsibilities, and Authorities

Cybersecurity is included in human resources practices.

Think of it likeVetting a new babysitter before hiring them, teaching them the house rules on day one, and collecting the house key when they stop working for you.

In plain English

Whenever someone new starts helping the family, they are checked out first, taught the safety rules, and have their access taken away when they leave.