ID.RA - Risk Assessment

ID.RA - Risk Assessment focuses on identifying and evaluating threats, vulnerabilities, and potential impacts to the organization's systems and data, then prioritizing those risks based on likelihood and severity. It informs the development of risk profiles and supports decisions about how to manage, mitigate, or accept identified risks.