Expert Advice Community

Guest

ISMS & BCMS risk assessment

  Quote
Guest
Guest user Created:   Apr 21, 2021 Last commented:   Apr 21, 2021

ISMS & BCMS risk assessment

Our organization ERM & BCMS risk is 5 (impact) x 5 (likelihood), however the ISMS is 4 (impact) x 4 (likelihood), can we use both or it should be aligned. based on your audit experience, is it nonconformity or not.

0 0

Assign topic to the user

Assign

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal Apr 21, 2021

ISO 27001 does not prescribe how to evaluate risks, so you can choose the approach that better fits your needs.

Considering that, you can use different scales for your ERM & BCMS and ISMS. This difference is not a reason to raise a nonconformity, but the auditor may inquire the reason for using a different scale, since using a single scale can make your risk management process easier (you wouldn’t need to convert values to compare risks from different frameworks).

These articles will provide you a further explanation about risk assessment:
- ISO 27001/ISO 27005 risk assessment & treatment – 6 basic steps https://advisera.com/27001academy/01academy/emy/ademy/my/knowledgebase/iso-27001-risk-assessment-treatment-6-basic-steps/
- How to assess consequences and likelihood in ISO 27001 risk analysis https://advisera.com/27001academy/01academy/emy/ademy/my/knowledgebase/how-to-assess-consequences-and-likelihood-in-iso-27001-risk-analysis/

This material will also help you regarding risk assessment:
- Book ISO 27001 Risk Management in Plain English https://advisera.com/books/iso-27001-annex-controls-plain-english/

Quote
0 1

Comment as guest or Sign in

HTML tags are not allowed

Apr 21, 2021

Apr 21, 2021

Suggested Topics

Guest user Created:   May 08, 2020 ISO 27001 & 22301
Replies: 1
0 0

ISO 22301/business continuity

Kamil Created:   Jul 22, 2021 ISO 27001 & 22301
Replies: 2
0 0

Risk owner problem