NIST CSF 2.0 · derived mapping target
GV.RM-04Risk response strategy established
Define and communicate the acceptable ways to respond to risk (reduce, accept, transfer, avoid) so teams know their options before a decision is needed.
Mapping at a glance
GV.RM-04Risk response strategy establishedNIST CSF 2.0
GV.RM-04 is covered by 3 Sekit CSF controls. Open in the full graph →
Mapped from the Sekit CSF
The Sekit controls that cover this requirement, lens by lens.
ISO/IEC 27001:2022 · Annex A controls counterparts
Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.
Cyber Essentials counterparts
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Risk assessment and treatment plan
The record where the company identifies its security risks and decides what to do with each one (accept, reduce or transfer), with owners and deadlines.
From the Sekit evidence catalog
Related controls
Via the shared Sekit CSF topic, not the framework's own index.
Ask Sekura: “What evidence proves GV.RM-04?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk- In Claude or ChatGPT, add a custom connector and paste this URL.
- Sign in with your email to finish. Free, read-only, no organization required.