ID.RA-05 Threats, vulnerabilities, likelihoods, and impacts are used to understand inherent risk and inform risk response prioritization

Statement

Threats, vulnerabilities, likelihoods, and impacts are used to understand inherent risk and inform risk response prioritization

Guidance

Develop threat models to better understand risks to the data and identify appropriate risk responses

Guidance

Prioritize cybersecurity resource allocations and investments based on estimated likelihoods and impacts

1. Áttekintés

1.1 Hivatkozások

• 2.1 Risk management framework
• 6.10 Vulnerability handling and disclosure

1.2 Azonosított követelmények

1.3 Kapcsolódó szabályozások

2. Azonosított követelmények

3. Kapcsolódó szabályozások

Kapcsolt feladatok

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final