GV.OC-02 Internal and external stakeholders are understood, and their needs and expectations are considered

NIST Cybersecurity Framework 2.0 · 2.0

What the standard requires

Internal and external stakeholders are understood, and their needs and expectations regarding cybersecurity risk management are understood and considered

Quoted verbatim from NIST Cybersecurity Framework (CSF) 2.0, which is in the public domain.

Maps to 3 controls in 3 other frameworks

Framework	Control
NIST AI Risk Management Framework 1.0	GOVERN-5.1 Organizational policies and practices are in place to collect, consider, prioritize, and integrate feedback from those external to the team that developed or deployed the AI system regarding the potential individual and societal impacts related to AI risks.
NIST Cybersecurity Framework (1.1, legacy)	ID.BE-2 Organization place in critical infrastructure identified
SOC 2 Type II	CC2.1 COSO Principle 13: Uses relevant information

Mappings are CMDash’s own, seeded with the product and shown on both frameworks they connect. In the product they mean evidence you attach here also counts against the controls listed above.

Track GV.OC-02 with evidence behind it

In CMDash this control is a row with an owner, a status, uploaded evidence kept with its full history, and an export an assessor can read.

Start free trial All NIST Cybersecurity Framework 2.0 controls