GV.OC: Organizational Context

Info icon.

Category is new to this version of the framework and incorporates the following item from the previous version: ID.BE: Business Environment.


The circumstances – mission, stakeholder expectations, dependencies, and legal, regulatory, and contractual requirements – surrounding the organization's cybersecurity risk management decisions are understood

Framework Subcategories