Risk assessment procedures. Implements CyFun ID.RA: asset vulnerabilities are identified, internal and external threats are identified, and risks (likelihood and impact) are determined.
Maintained by Gerard Blokdyk·Verified against the published standard ·Control text last updated
What else in your programme already covers this
This control maps to 31 controls across 15 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.