SIG (Shared Assessments)
SIG: Risk, Policy and Organisation

SIG (Shared Assessments) SIG-A-01: Risk Assessment and Treatment Program

Maintain a documented risk assessment and treatment program covering information security, operational, third party, and compliance risks, with defined ownership, frequency, and integration into business decision making.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in SIG: Risk, Policy and Organisation

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll SIG (Shared Assessments) controls