Xcavate Team Docs
Ctrlk
  • Introduction
  • Policies & SOPs
  • Linear Integration: Automated Issue Routing System
  • Risk & Compliance
    • Introduction
    • Governance and Compliance Structure
    • Risk Categories and Mitigation Measures
    • Risk Management Framework
      • Introduction
      • Risk Management Process
        • Identify Assets and Risks
        • Categorise Information and Systems
        • Select and Implement Security Controls
        • Assess Control Effectiveness
        • Authorisation and Risk Acceptance
        • Continuous Monitoring and Continuous Management
    • Compliance Framework
    • Threat and Vulnerability Management (TVM)
    • Incident Management
    • Monitoring and Auditing
    • Employee Training and Awareness
    • Continuous Improvement
    • Conclusion
    • Appendix A: Glossary of Key Terms
    • Appendix B: Risk Register (Template)
    • Appendix C: TVM Risk Register Template
    • Appendix D: Incident (Template)
    • Appendix E: Compliance Checklists (Templates)
    • Appendix F: Control and Compliance Mappings
  • Security
  • Testing
  • Audits
Powered by GitBook
On this page
  1. Risk & Compliance
  2. Risk Management Framework

Risk Management Process

Identify Assets and RisksCategorise Information and SystemsSelect and Implement Security ControlsAssess Control EffectivenessAuthorisation and Risk AcceptanceContinuous Monitoring and Continuous Management
PreviousIntroductionNextIdentify Assets and Risks