NIST CSF 2.0 · derived mapping target
GV.RM-07Strategic opportunities characterized
Recognize that some risk-taking creates upside, and include those positive opportunities in risk discussions so security enables the business as well as protecting it.
Mapping at a glance
GV.RM-07Strategic opportunities characterizedNIST CSF 2.0
GV.RM-07 is covered by 9 Sekit CSF controls. +4 more in the table below. Open in the full graph →
Mapped from the Sekit CSF
The Sekit controls that cover this requirement, lens by lens.
RCF-0010Risk treatment · PolicyRCF-0011Risk treatment · ProcessRCF-0012Risk treatment · TechnicalRCF-0034Issues management · PolicyRCF-0035Issues management · ProcessRCF-0036Issues management · TechnicalRCF-0385Corrective action tracking · PolicyRCF-0386Corrective action tracking · ProcessRCF-0387Corrective action tracking · Technical
ISO/IEC 27001:2022 counterparts
Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.
ISO/IEC 42001:2023 — Annex A counterparts
Cyber Essentials counterparts
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Risk assessment and treatment plan
The record where the company identifies its security risks and decides what to do with each one (accept, reduce or transfer), with owners and deadlines.
From the Sekit evidence catalog
Related controls
Via the shared Sekit CSF topic, not the framework's own index.
Ask Sekura: “What evidence proves GV.RM-07?”
Also via MCP, free with account