Prepare (P)

Essential activities to prepare the organization to manage security and privacy risks using the Risk Management Framework. Includes establishing context, risk tolerance, and organizational-level tailoring.