Xcavate Team Docs
search
⌘Ctrlk
Xcavate Team Docs
  • Introduction
  • Policies & SOPs
  • Linear Integration: Automated Issue Routing System
  • Risk & Compliance
    • Introduction
    • Governance and Compliance Structure
    • Risk Categories and Mitigation Measures
    • Risk Management Framework
      • Introduction
      • Risk Management Process
        • Identify Assets and Risks
        • Categorise Information and Systems
        • Select and Implement Security Controls
        • Assess Control Effectiveness
        • Authorisation and Risk Acceptance
        • Continuous Monitoring and Continuous Management
    • Compliance Framework
    • Threat and Vulnerability Management (TVM)
    • Incident Management
    • Monitoring and Auditing
    • Employee Training and Awareness
    • Continuous Improvement
    • Conclusion
    • Appendix A: Glossary of Key Terms
    • Appendix B: Risk Register (Template)
    • Appendix C: TVM Risk Register Template
    • Appendix D: Incident (Template)
    • Appendix E: Compliance Checklists (Templates)
    • Appendix F: Control and Compliance Mappings
  • Security
  • Testing
  • Audits
gitbookPowered by GitBook
block-quoteOn this pagechevron-down
  1. Risk & Compliancechevron-right
  2. Risk Management Framework

Risk Management Process

Identify Assets and Riskschevron-rightCategorise Information and Systemschevron-rightSelect and Implement Security Controlschevron-rightAssess Control Effectivenesschevron-rightAuthorisation and Risk Acceptancechevron-rightContinuous Monitoring and Continuous Managementchevron-right
PreviousIntroductionchevron-leftNextIdentify Assets and Riskschevron-right