PCI 3DS Core Security Standard P1-1.2.2: P1-1.2.2 Risk assessment run yearly and after significant change

What else in your programme already covers this

This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Part 1 Requirement P1-1: Maintain security policies for all personnel – PCI 3DS Core Security Standard

• P1-1.1.1 P1-1.1.1 Organisation-wide security policy exists and reaches everyone concerned
• P1-1.1.2 P1-1.1.2 Policy revised when business aims or risks change
• P1-1.1.3 P1-1.1.3 Policy changes communicated to the people affected
• P1-1.1.4 P1-1.1.4 Management approval of the security policy
• P1-1.1.5 P1-1.1.5 Personnel confirm they have read and understood the policy
• P1-1.2.1 P1-1.2.1 Written risk-assessment process
• P1-1.3.1 P1-1.3.1 Security awareness programme in operation
• P1-1.3.2 P1-1.3.2 Awareness training at set intervals, fitted to the role