thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

CSF Govern Function (GV)

CSF 2.0 function covering cybersecurity risk management strategy, expectations, policy, roles, oversight, and supply chain risk.

Definition

Govern informs how an organization achieves the other five functions. Its categories are Organizational Context (GV.OC), Risk Management Strategy (GV.RM), Roles, Responsibilities, and Authorities (GV.RR), Policy (GV.PO), Oversight (GV.OV), and Cybersecurity Supply Chain Risk Management (GV.SC). Placing supply chain risk under Govern was a notable 2.0 change.

Example

Defining risk appetite statements and assigning cybersecurity accountability to executives are GV outcomes.

Exam tip

Supply chain risk management moved from Identify (1.1) to Govern (2.0).

Related terms