NIST CSF 2.0 · derived mapping target
GV.OC-01Organizational mission understood
Make sure everyone managing cyber risk knows what the business is actually trying to achieve, so security effort protects what matters most. Tie protection priorities back to the mission, not to a generic checklist.
Mapping at a glance
GV.OC-01Organizational mission understoodNIST CSF 2.0
GV.OC-01 is covered by 12 Sekit CSF controls. +7 more in the table below. Open in the full graph →
Mapped from the Sekit CSF
The Sekit controls that cover this requirement, lens by lens.
RCF-0016Regulatory compliance · PolicyRCF-0017Regulatory compliance · ProcessRCF-0018Regulatory compliance · TechnicalRCF-0028Security charter · PolicyRCF-0029Security charter · ProcessRCF-0030Security charter · TechnicalRCF-0376Compliance calendar · PolicyRCF-0377Compliance calendar · ProcessRCF-0378Compliance calendar · TechnicalRCF-0379Regulatory mapping · PolicyRCF-0380Regulatory mapping · ProcessRCF-0381Regulatory mapping · Technical
ISO/IEC 27001:2022 counterparts
Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.
ISO/IEC 42001:2023 — Annex A counterparts
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Organizational context and security scope
The document that captures the business mission and objectives, the interested parties (customers, regulators, partners, staff) and what they expect, the critical services others rely on, and the external dependencies (suppliers, infrastructure) your operations rest on.
From the Sekit evidence catalog
Related controls
Via the shared Sekit CSF topic, not the framework's own index.
Ask Sekura: “What evidence proves GV.OC-01?”
Also via MCP, free with account