9. Assessing risks
Risk assessment is the third step in risk evaluation.
Risk assessment: the process of comparing the results of risk analysis with risk criteria to determine whether the risk and/or its significance are acceptable or tolerable (ISO/IEC 27000, § 3.67).
Criticality: level of importance of a risk. It is the result of combining the quantified characteristics of the risk, i.e. its severity, probability of occurrence and/or probability of detection (FD X 50-117).
The analysis of the importance of a risk therefore consists of :
You do not have access to this resource.
Exclusive to subscribers. 97% yet to be discovered!
Already subscribed?
Log in!
Ongoing reading
Assessing risks