Expert Advice Community

Home / ISO 27001 & 22301 / Assessment criteria

Guest

Assessment criteria

ISO 27001 & 22301
  Quote
Guest
Guest user Created:   Jan 28, 2018 Last commented:   Jan 28, 2018

Assessment criteria

ISO 27001 & 22301
Hello, can you explain the assessment criteria?
0 0

Assign topic to the user

ISO 27001 RISK ASSESSMENT AND RISK TREATMENT METHODOLOGY

Define main rules for risk assessment and treatment.

ISO 27001 RISK ASSESSMENT AND RISK TREATMENT METHODOLOGY

Define main rules for risk assessment and treatment.
Expert
Rhand Leal Jan 28, 2018

1= marginal, 2= acceptable, 3= high, 4= catastrophic

We were questioned about the difference between marginal and acceptable.

Answer: The term "marginal" refers to an event that is barely registered, with an impact so small that is considered not worthy to act upon, while the term "acceptable" refers to an event that has a perceivable impact, but which the organization has chosen to not act upon.

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Jan 28, 2018

Jan 28, 2018

Suggested Topics
Guest user Created:   Feb 16, 2018 ISO 27001 & 22301
Replies: 1
0 0

Assessment criteria rationale
Guest user Created:   Sep 07, 2023 ISO 27001 & 22301
Replies: 1
0 0

Certification for both 9001 and 27001
Guest user Created:   Aug 22, 2023 ISO 27001 & 22301
Replies: 1
0 0

Risk assessment Guidance

This website stores cookies on your computer. These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information in order to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, see our Privacy Policy.

If you decline, your information won't be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.