ID.RA-04 Potential impacts and likelihoods of threats exploiting vulnerabilities are identified and recorded

Statement

Potential impacts and likelihoods of threats exploiting vulnerabilities are identified and recorded

Guidance

Business leaders and cybersecurity risk management practitioners work together to estimate the likelihood and impact of risk scenarios and record them in risk registers

Guidance

Enumerate the potential business impacts of unauthorized access to the organization's communications, systems, and data processed in or by those systems

Guidance

Account for the potential impacts of cascading failures for systems of systems

1. Overview

1.1 References

• 2.1 Risk management framework
• 6.10 Vulnerability handling and disclosure

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final