← NIST CSF 2.0 in plain English

ID.RA-10

Identify / Risk Assessment

Critical suppliers are assessed prior to acquisition.

Think of it likeChecking the credentials of a contractor before hiring them to work on your home.

In plain English

Before hiring someone for the jobs that really matter, like a contractor who will touch the wiring or the foundation, the family digs into their license, insurance, and past clients, checking harder the more critical the work is.

Related CIS safeguards (unofficial mapping)