> For the complete documentation index, see [llms.txt](https://docs.dispel.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.dispel.com/regulatory-framework-mappings/nist-csf-1.1/identifiy.md).

# Identify

### Asset Management (ID.AM)

NIST Definition: *The data, personnel, devices, systems, and facilities that enable the organization to achieve business purposes are identified and managed consistent with their relative importance to organizational objectives and the organization’s risk strategy.*

| **Section**                                                                                                                                                                                  | **How Dispel Helps**                                                                                                                                                           |
| -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| <p><strong>ID.AM-3</strong></p><p>Organizational communication and data flows are mapped.</p>                                                                                                | Dispel networks create simple, clear data flows between different systems, individuals, and units.                                                                             |
| <p><strong>ID.AM-4</strong></p><p>External information systems are catalogued.</p>                                                                                                           | Dispel creates a clear list of external systems and individuals granted access to infrastructure/systems.                                                                      |
| <p><strong>ID.AM-6</strong></p><p>Cybersecurity roles and responsibilities for the entire workforce and third-party stakeholders (e.g., suppliers, customers, partners) are established.</p> | By creating single-use paths to access networks and assets, Dispel assists in enforcing cybersecurity standards on all parties with access (both workforce and third-parties). |

### Business Environment (ID.BE)&#x20;

NIST Definition: *The organization’s mission, objectives, stakeholders, and activities are understood and prioritized; this information is used to inform cybersecurity roles, responsibilities, and risk management decisions.*

| **Section**                                                                                                                                      | **How Dispel Helps**                                                                                                                |
| ------------------------------------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------- |
| <p><strong>ID.BE-4</strong></p><p>Dependencies and critical functions for delivery of critical services are established.</p>                     | Dispel supports the core mission of the business by providing secure access to critical systems for key personnel across locations. |
| <p><strong>ID.BE-5</strong></p><p>Resilience requirements to support delivery of critical services are established for all operating states.</p> | Ability for systems to refresh and deploy across multiple cloud environments provides significant resiliency.                       |

### Risk Assessment (ID.RA)

NIST Definition: *The organization understands the cybersecurity risk to organizational operations (including mission, functions, image, or reputation), organizational assets, and individuals.*

| **Section**                                                                                                              | **How Dispel Helps**                                                                                                                                                                                             |
| ------------------------------------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| <p><strong>ID.RA-2</strong></p><p>Cyber threat intelligence is received from information sharing forums and sources.</p> | Dispel’s disposable virtual desktop platform helps threat intelligence teams discretely access forums and sources to gather intelligence without revealing their intentions, affiliations, or original location. |

### Supply Chain Risk Management (ID.SC)&#x20;

NIST Definition: *The organization’s priorities, constraints, risk tolerances, and assumptions are established and used to support risk decisions associated with managing supply chain risk. The organization has established and implemented the processes to identify, assess and manage supply chain risks.*

| **Section**                                                                                                                                                                                                          | **How Dispel Helps**                                                                                                                                                                                                                                                                                                                                                                                                                                             |
| -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| <p><strong>ID.SC-4</strong></p><p>Suppliers and third-party partners are routinely assessed using audits, test results, or other forms of evaluations to confirm they are meeting their contractual obligations.</p> | <p>Dispel infrastructure provides simple means to control third party access, enforce multifactor authentication, and enforce use of organization controlled systems. When using a Dispel-built virtual desktop, the entire connection process is auditable, monitored, and recorded.</p><p></p><p>Dispel provides a means of enforcing cybersecurity standards on third parties without the need for relying on them to have those capabilities beforehand.</p> |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.dispel.com/regulatory-framework-mappings/nist-csf-1.1/identifiy.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.