Converged Security Framework - Risk Management and Assessment Procedure

Risk Management and Assessment Procedure. Board-approved procedure, v1.0. Not a peer-reviewed Journal article. This procedure tells an adopting organisation exactly who does what, when and how to implement GCSB-ST-CSF-RMA-001. It converts the standard's risk management requirements (clauses 6.1 to 6.10) into repeatable, auditable steps. It does not change, relax or extend any requirement of the standard; where this procedure and the standard differ, the standard prevails. Issued by Global Converged Security Board. The adopting organisation is responsible for implementation; publication does not itself confer accreditation or a credential.