...
- Mapping of information assets with valuationand value assessment
- Mapping of existing measuresmitigating activities
- Mapping of risk elements
- Assessment of risk level (consistency and probability)
- Measures in relation to risk factors
- Categorization and prioritization of measures
- Approval of measures
- Implementation and follow-up of measures