ID.RA-05 Threats, vulnerabilities, likelihoods, and impacts are used to understand inherent risk and inform risk response prioritization

Statement

Threats, vulnerabilities, likelihoods, and impacts are used to understand inherent risk and inform risk response prioritization

Example

Develop threat models to better understand risks to the data and identify appropriate risk responses

Example

Prioritize cybersecurity resource allocations and investments based on estimated likelihoods and impacts

1. Pregled

1.1 Sklici

1.2 Ugotovljene zahteve

1.3 Povezani predpisi

2. Ugotovljene zahteve

3. Povezani predpisi

Povezane zadeve

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final