Control domain
Risk assessment & management
Assessing security risk and maintaining a programme of appropriate, risk-based measures.
8 requirements across 8frameworks & regulations.
- NIST 800-53RelatedRA-3 Risk assessment
- NIST 800-171Related3.11.1 Periodically assess risk
- HIPAARelated§164.308(a)(1) Security management process
- DORARelatedArt. 6 ICT risk management framework
- CCPA / CPRARelated§1798.150 Duty to implement reasonable security
- LGPDPartialArt. 46 Security measures
- NIST CSF 2.0PartialID.RA-01 Vulnerabilities identified and recorded