+Risk Management Policy

Risk Management Policy

Policies and instructions for risk management procedures are documented, communicated and provided in accordance with SP-01 for the following aspects:
• Identification of risks associated with the loss of confidentiality, integrity, availability and authenticity of information within the scope of the ISMS and assigning risk owners;
• Analysis of the probability and impact of occurrence and determination of the level of risk;
• Evaluation of the risk analysis based on defined criteria for risk acceptance and prioritisation of handling;
• Handling of risks through measures, including approval of authorisation and acceptance of residual risks by risk owners; and
• Documentation of the activities implemented to enable consistent, valid and comparable results.
Additonal Criteria-
Supplementary Information - About the CriteriaThe risk level can be determined by qualitative, semi-quantitative and quantitative methods (cf. ISO 31010) based on the likelihood and impacts.

1. Преглед

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

Изисквания

3. Свързани регулации

Регулации