API 1164
Identify (ID): governance, risk strategy, business environment, supply chain, risk assessment, asset management (Section 6) – API 1164

API 1164 ID.RM-2: ID.RM-2 Risk tolerance documented, approved and set per profile

The plan must require that enterprise risk tolerance is taken into account when the IAC risk management strategy records the IAC risk tolerance, that IAC risk tolerance is approved by defined stakeholders, and that tolerance is specified for Baseline Profile segregated environments, with tolerance for Enhanced and Extended Profile environments specified at the higher profiles.

Maintained by Gerard BlokdykControl text last updated

Other controls in Identify (ID): governance, risk strategy, business environment, supply chain, risk assessment, asset management (Section 6) – API 1164

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll API 1164 controls