top of page

Principle 2

RISK-INFORMED SYSTEM

Establish a Methodology for Risk Thresholds

< Back To Framework

An approved and repeatable methodology for establishing acceptable risk thresholds – both appetite and tolerance – must be established.

2023 Draft NIST CSF 2.0 GV.RM-02

2023 NACD Director’s Handbook on Cyber-Risk Oversight Principle 1, 5

bottom of page