RA - Risk Assessment

RA - Risk Assessment is a family of controls that require organizations to identify, evaluate, and prioritize risks to operations, assets, and individuals. It includes processes for assessing threats, vulnerabilities, likelihood, and impact, and for documenting risk levels to inform decision-making and mitigation planning.