NIST CSF 2.0 · derived mapping target
GV.RM-01Risk management objectives established
Agree clear goals for what your risk program should accomplish, with sign-off from leadership. Shared objectives prevent security from drifting in different directions.
Mapping at a glance
GV.RM-01Risk management objectives establishedNIST CSF 2.0
GV.RM-01 is covered by 3 Sekit CSF controls. Open in the full graph →
Mapped from the Sekit CSF
The Sekit controls that cover this requirement, lens by lens.
RCF-0007Risk assessment · PolicyRCF-0008Risk assessment · ProcessRCF-0009Risk assessment · Technical
ISO/IEC 27001:2022 counterparts
Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.
ISO/IEC 42001:2023 — Annex A counterparts
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Information security policy
The written, leadership-approved document that sets the company's security rules: what is protected, how, and who is responsible.
Risk assessment and treatment plan
The record where the company identifies its security risks and decides what to do with each one (accept, reduce or transfer), with owners and deadlines.
From the Sekit evidence catalog
Related controls
Via the shared Sekit CSF topic, not the framework's own index.
Ask Sekura: “What evidence proves GV.RM-01?”
Also via MCP, free with account