ID.RA-04 Potential impacts and likelihoods of threats exploiting vulnerabilities are identified and recorded

Statement

Potential impacts and likelihoods of threats exploiting vulnerabilities are identified and recorded

Guidance

Business leaders and cybersecurity risk management practitioners work together to estimate the likelihood and impact of risk scenarios and record them in risk registers

Guidance

Enumerate the potential business impacts of unauthorized access to the organization's communications, systems, and data processed in or by those systems

Guidance

Account for the potential impacts of cascading failures for systems of systems

1. Přehled

1.1 Odkazy

• 2.1 Risk management framework
• 6.10 Vulnerability handling and disclosure

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

3. Související regulace

Propojené úkoly

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final