You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 9 Next »

SIG-ISM has published a white paper on risk management.

A reference to ISO 27001 chapter 5. leadership should be added her, specifically detailing how the organization addresses risk responsibilities and residual risks.


Risk assessment process

The risk assessment process can be divided into the following activities:

  • Mapping of information assets with valuation
  • Mapping of existing measures
  • Mapping of risk elements
  • Assessment of risk level (consistency and probability)
  • Measures in relation to risk factors
  • Categorization and prioritization of measures
  • Approval of measures
  • Implementation and follow-up of measures
  • No labels