Acceptable Risk Document
Assign topic to the user
Answer: By Acceptable Risk Document I'm assuming you are referring to a document informing the results of a risk assessment. Considering that, in this document you have to include a brief description of the methodology you used to identify and analyse the risks, the criteria used to evaluate them and results of the risks assessment, including the list of acceptable risks, so anyone looking for information about how and why you decided to accept the risks can easily find it.
For an example of such similar content, I suggest you to take a look at the free demo of our Risk Assessment and Treatment Report at this link: https://advisera.com/27001academy/documentation/risk-assessment-and-treatment-report/
This article will provide you further explanation about risk assessment:
- ISO 27001 risk assessment & treatment – 6 basic steps https://advisera.com/27001academy/knowl edgebase/iso-27001-risk-assessment-treatment-6-basic-steps/
- Why is residual risk so important? https://advisera.com/27001academy/knowledgebase/why-is-residual-risk-so-important/
These materials will also help you regarding risk assessment:
- Book ISO 27001 Risk Management in Plain English https://advisera.com/books/iso-27001-annex-controls-plain-english/
- The basics of risk assessment and treatment according to ISO 27001 [free webinar on demand] https://advisera.com/27001academy/webinar/basics-risk-assessment-treatment-according-iso-27001-free-webinar-demand/
Comment as guest or Sign in
Sep 06, 2017