← NIST CSF 2.0 in plain English

ID.RA-07

Identify / Risk Assessment

Changes and exceptions are managed, assessed for risk impact, recorded, and tracked.

Think of it likeNoting any changes in the house, like new furniture, and making sure it doesn’t create new risks.

In plain English

Whenever something in the house changes, like a new space heater or a rug thrown over an outlet, the family stops to ask what fresh hazard it might create and adds it to the list they keep an eye on.

Related CIS safeguards (unofficial mapping)

No direct mapping.