1. Govern
“Establish and monitor the organization’s cybersecurity risk management strategy, expectations, and policy.” – NIST
- Understand the organization’s mission, context, and priorities
- Define cybersecurity strategy and supply chain risk management
- Assign clear roles, responsibilities, and authorities
- Establish and communicate cybersecurity policies
- Provide oversight and continuous monitoring of cybersecurity efforts











