GV.OC-04:
Critical objectives, capabilities, and services that external stakeholders depend on or expect from the organization are understood and communicated
Implementation Examples
Ex1:
Establish criteria for determining the criticality of capabilities and services as viewed by internal and external stakeholders
Ex2:
Determine (e.g., from a business impact analysis) assets and business operations that are vital to achieving mission objectives and the potential impact of a loss (or partial loss) of such operations
Ex3:
Establish and communicate resilience objectives (e.g., recovery time objectives) for delivering critical capabilities and services in various operating states (e.g., under attack, during recovery, normal operation)