SPRING DISCOUNT
Get 30% off on toolkits, course exams, and Conformio yearly plans.
Limited-time offer – ends April 25, 2024
Use promo code:
SPRING30

Expert Advice Community

Guest

Development Risk Assessment and Treatment Methodology

  Quote
Guest
Guest user Created:   Nov 12, 2019 Last commented:   Nov 12, 2019

Development Risk Assessment and Treatment Methodology

Adquiri o modelo de metodologia de avaliaçaõ e tratamento de riscos, ao desenvolver o documento vocês citam algumas referências como:

  • Nome do cargo
  • Cargo

Quem seriam essas pessoas???

(I acquired the risk assessment and treatment methodology model when developing the document you cite some references as:

  • Job Name
  • Position

Who would these people be?)

0 0

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal Nov 12, 2019

Nome do cargo e cargo referem-se às funções na organização que têm a responsabilidade de executar alguma atividade no documento. Por exemplo, na frase "[nome do cargo] é responsável por coordenar as atividades de avaliação de risco", você deve definir qual papel em sua organização coordenará essa atividade. Esse pode ser o responsável pela segurança, se essa função existir em sua organização, ou você pode definir uma função existente para acumular essa atividade (por exemplo, gerente de TI).

Para mais informações sobre funções e responsabilidades, leia:
- Como documentar papéis e responsabilidades de acordo com a ISO 27001 https://advisera.com/27001academy/pt-br/blog/2016/06/22/como-documentar-papeis-e-responsabilidades-de-acordo-com-a-iso-27001/

 

(Job title and position refers to the roles in the organization who has the responsibility to perform some activity in the document. For example in the phrase "[Jobtitle] is responsible to coordinate risk assessment activities", you have to define which role in your organization will coordinate this activity. This one can be the security officer if such a role exists in your organization, or you can define an existing role to accumulate this activity (e.g., IT manager).

For more information about roles and responsibilities, please read:
- How to document roles and responsibilities according to ISO 27001 https://advisera.com/27001academy/blog/2016/06/20/how-to-document-roles-and-responsibilities-according-to-iso-27001/)

Quote
0 1

Comment as guest or Sign in

HTML tags are not allowed

Nov 12, 2019

Nov 12, 2019

Suggested Topics

Guest user Created:   May 26, 2023 ISO 27001 & 22301
Replies: 1
0 0

ISO 27001 compliance process

Guest user Created:   Nov 21, 2022 ISO 27001 & 22301
Replies: 1
0 0

ISO 27001:2013 Certification

Guest user Created:   Oct 28, 2022 ISO 27001 & 22301
Replies: 1
0 0

HIPAA vs ISO