Belgium CyberFundamentals
Belgium CyberFundamentals: Identify

Belgium CyberFundamentals BE-CF-13: Risk assessment procedures

Risk assessment procedures. Implements CyFun ID.RA: asset vulnerabilities are identified, internal and external threats are identified, and risks (likelihood and impact) are determined.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 31 controls across 15 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO/IEC 29134:2023 · 3 controls

  • 29134-1 Scope
  • 29134-3 Terms and definitions
  • 29134-9.1 PIA report structure

API 1164 · 2 controls

  • API1164-07 Remote Access
  • API1164-24 Vulnerability assessment for critical systems

ISO 22301:2019 · 2 controls

  • 6.1.2 Addressing risks and opportunities
  • 8.2.3 Risk assessment
  • 27557-4.3 Individual impact consideration
  • 27557-6.3 Privacy risk assessment
  • 2.4.4 Hazard Analysis and Risk Assessment
  • 2.7.2 Food Fraud Plan
  • AMLCTF-PartA-RiskAssess ML/TF Risk Assessment
  • 4.3.1 Risk Assessment and Impact Analysis
  • BB-DPA-20 Sections 50-60 - Registration and Responsibilities

ISO 31000:2018 · 1 control

  • 6.4 Risk assessment

ISO/IEC 23894:2023 · 1 control

  • 6.4 Risk assessment

ISO/IEC 27031:2011 · 1 control

  • 27031-7.2 Resource Requirements

ISO/IEC 29147:2018 · 1 control

  • 29147-5.11 Researcher Safe Harbour and Legal Posture

ISO/IEC 42001:2023 · 1 control

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Belgium CyberFundamentals: Identify

Query this from an agent

The graph holds this control, the 31 it maps to, and the evidence behind each claim, over MCP and REST.