← NIST CSF 2.0 in plain English

ID.RA-05

Identify / Risk Assessment

Threats, vulnerabilities, likelihoods, and impacts are used to understand inherent risk and inform risk response prioritization.

Think of it likeDeciding to fix a broken lock immediately because it could lead to a break-in.

In plain English

The family prioritizes which issues to address based on how likely and severe the risks are, ensuring they tackle the most critical problems first.

Related CIS safeguards (unofficial mapping)