Review documentation and evidence for Risk Management Strategy (ID.RM)
Assess organizational maturity for IDENTIFY function
How to Test
Step 1: Identify Current Profile
Determine the organization's current and target CSF profile tier for Risk Management Strategy (ID.RM).
Step 2: Assess Outcome Achievement
# Review organizational policies and procedures
# Check for evidence that Risk Management Strategy (ID.RM) outcome is met
# Interview stakeholders responsible for IDENTIFY
Step 3: Map to Technical Controls
Identify which SP 800-53 controls implement this CSF outcome and verify their operating effectiveness.
Tools
Tool
Purpose
Usage
cloud-audit-mcp
Assess cloud security posture
cloud_audit_* tools
Manual Review
Policy and procedure review
Interviews and documentation
Remediation Guide
Achieve the Risk Management Strategy (ID.RM) Risk Management Strategy outcome:
Implement controls that satisfy the Risk Management Strategy outcome per NIST CSF v2.0.
Risk Assessment
Finding
Severity
Impact
Risk Management Strategy (ID.RM) Risk Management Strategy outcome not achieved
Run npx skillmds@latest add cyberstrikeus/risk-management-strategy-id-rm-risk-management-strategy in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Risk Management Strategy It is listed under Coding & Dev Tools on SkillMD.
SkillMD's automated safety review verdict for this skill is PASS. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
cyberstrikeus (@cyberstrikeus) published this skill. Their other Agent Skills are listed on their SkillMD profile.