← NIST CSF 2.0 in plain English

ID.RA-05

Identify / Risk Assessment

Threats, vulnerabilities, likelihoods, and impacts are used to understand inherent risk and inform risk response prioritization.

Think of it likeDeciding to fix a broken lock immediately because it could lead to a break-in.

In plain English

The family prioritizes which issues to address based on how likely and severe the risks are, ensuring they tackle the most critical problems first.