Guest user Created: Mar 31, 2016 Last commented: Mar 31, 2016

Questions on Risk treatment table

For Risk Treatment Table, do we need to copy all the risks from risk assessment table or only with high risk?

0 0

Assign topic to the user

Select user

Dejan Kosutic Mar 31, 2016

Answer: You should copy only those risks that are not acceptable - if you're using our Risk assessment methodology, the risks with values 3 and 4 are not acceptably.

And for certain risks, can we have same control? Like I have few assets with the risk of Disclosure/Leakage of Information, can I apply Confidentiality or disclosure agreements control for that risks?

Answer: Sure, you can apply some controls for several risks, while other controls will be applied only for one risk; further, you should apply several controls for one risk, just to make sure that risk is decreased.

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Mar 31, 2016

Expert Advice Community