Glossary
Information security, cybersecurity, and protection of privacy data - ISO/IEC 27001 : 2022

asset

Any element that represents value for the organization.

Amélioration continue; continual improvement

Regular activity to increase capacity to meet requirements.

Risk analysis

Process used to understand the nature and determine the level of risk.

Risk assessment

The entire process of identifying, analyzing and assessing risks.

Confidentiality

The property that information is not made available or disclosed to unauthorized persons, entities or processes.

Criticité; criticality

Level of importance of a risk: results from the combination of quantified characteristics of the risk, i.e. its severity, probability of occurrence...