12. Glossary – Definitions

Information security management system (ISMS); Système de management de la sécurité de l'information (SMSI)

Part of the overall management system, based on a business risk approach, aimed at establishing, implementing, operating, monitoring, reviewing, maintaining and improving information security.

Risk assessment

The entire process of identifying, analyzing and assessing risks.

Risk treatment

Process designed to modify a risk.

Amélioration continue; continual improvement

Regular activity to increase capacity to meet requirements.

asset

Any element that represents value for the organization.

Risk identification

The...