Expert Advice Community

Home / ISO 27001 & 22301 / Assessment criteria

Guest

Assessment criteria

ISO 27001 & 22301

Quote

Guest

Guest user Created: Jan 28, 2018 Last commented: Jan 28, 2018

Assessment criteria

ISO 27001 & 22301

Hello, can you explain the assessment criteria?

0 0

Assign topic to the user

Select user

Expert

Rhand Leal Jan 28, 2018

1= marginal, 2= acceptable, 3= high, 4= catastrophic

We were questioned about the difference between marginal and acceptable.

Answer: The term "marginal" refers to an event that is barely registered, with an impact so small that is considered not worthy to act upon, while the term "acceptable" refers to an event that has a perceivable impact, but which the organization has chosen to not act upon.

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Jan 28, 2018