ID.RA-06 Risk responses are chosen, prioritized, planned, tracked, and communicated

Statement

Risk responses are chosen, prioritized, planned, tracked, and communicated

Guidance

Apply the vulnerability management plan's criteria for deciding whether to accept, transfer, mitigate, or avoid risk

Guidance

Apply the vulnerability management plan's criteria for selecting compensating controls to mitigate risk

Guidance

Track the progress of risk response implementation (e.g., plan of action and milestones (POA&M), risk register, risk detail report)

Guidance

Use risk assessment findings to inform risk response decisions and actions

Guidance

Communicate planned risk responses to affected stakeholders in priority order

1. Vue d’ensemble

1.1 Références

• 2.1 Risk management framework
• 6.10 Vulnerability handling and disclosure

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

3. Réglementations associées

Tickets liés

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final