Identify
Understand cybersecurity risks to the organization's operation...
Understand cybersecurity risks to the organization's operations (including mission, functions, image or reputation), organizational assets, and individuals, identify and manage elements of the enterprise assets and their significance to business objectives, and use them to support operational risk decisions.