The organization sets up processes to assess risk arising from its assets, from asset management and from the asset management system, covering: identifying risks; analysing them and how they shift over time; evaluating them; working out how critical each asset is to meeting asset management objectives; and weighing alternatives and choosing how to treat each risk. It makes sure these risks feed into its wider risk management approach, contingency planning included. It plans (a) how it will address, treat, monitor and communicate those risks, allowing for the way they change over time, and (b) how it will build the actions into the system's processes and check whether they worked. Documented information on the planned actions, their implementation and their evaluation is kept available.
This control maps to 2 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
ISO 55001:2024 6.1.2 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of ISO 55001:2024 your existing evidence covers. Hold ISO 55001:2014 and 27 of 38 ISO 55001:2024 controls already carry evidence.
Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the ISO 55001:2014 pair alone.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.