GV.RM: Risk Management Strategy

Info icon.

Category is new to this version of the framework and incorporates the following item from the previous version: ID.RM: Risk Management Strategy.


The organization's priorities, constraints, risk tolerance and appetite statements, and assumptions are established, communicated, and used to support operational risk decisions

Framework Subcategories