Information Risk Management
What is Information Risk Management?
The process of identifying, assessing, and treating risks to an organization's information assets to protect their confidentiality, integrity, and availability.
Frameworks that govern information risk management
What the standards actually require on information risk management
Requirements naming information risk management across 3 standards, quoted from the control text.
The bank has policies and processes to identify, measure, evaluate, monitor, report and control or mitigate country risk (loss from events in a foreign country, broader than sovereign risk) and transfer risk (a borrower unable to convert local into foreign cur...
basel-core-principles-for-effective-banking-supervision-2024::P21 · Principle 21: country and transfer risks →The process and what comes out of it are written down and reported (ISO 31000:2018, 6.7), so that activities and results are shared across the organization, decision-makers have information, risk management gets better, and dealings with stakeholders, includin...
iso-iec-23894-2023::6.7 · Recording and reporting →When the responsible entity for a critical infrastructure asset becomes aware that another entity provides it, on a commercial basis, a data storage or processing service relating to business critical data (personal information of at least 20,000 individuals,...
security-of-critical-infrastructure-act-2018-soci::s12F(3) · Tell a data storage or processing provider that it holds business critical data →Questions people ask about information risk management
What is Information Risk Management?
Why is Information Risk Management important for compliance?
Which compliance frameworks address Information Risk Management?
Where can I learn more about Information Risk Management?
See how Information Risk Management applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.