Risk Assessment
What is Risk Assessment?
The process of identifying, analysing, and evaluating risks. Includes identifying assets and threats, assessing likelihood and impact, and determining risk treatment options.
Related terms
Frameworks that govern risk assessment
What the standards actually require on risk assessment
Requirements naming risk assessment across 6 standards, quoted from the control text.
Agencies should draw on their incident register as an input to future security risk assessments.
new-zealand-information-security-manual-nzism::7.3.6.C.02 · 7.3.6.C.02 Use incident register for future risk assessments →Workers in contact with PPPs are offered health checks annually or as the health and safety risk assessment requires, with privacy of personal information honoured;
globalgap-integrated-farm-assurance-ifa-standard-v6::FV-GFS 32.10.01 · FV-GFS 32.10.01 Access to health checks is available to workers with exposure to applicable plant protection products (PPPs) according to the risk assessment or exposure and toxicity of products. →The board establishes an effective risk-based audit function that covers all of the institution's major activities, with the frequency and depth of each area's audit set by that area's risk assessment and appropriate to the institution's size and complexity.
ffiec-it-examination-handbook::AUD-11 · Risk Assessment and Risk-Based Auditing (Audit) →Requirement 0143 (Part Five: Personnel, section 18.3 Security Clearances; applies to All entities; dated 31 October 2024; retained from Release 2025): The gaining sponsoring entity undertakes the exceptional business requirement and risk assessment provisions...
protective-security-policy-framework-pspf-release-2026::0143 · 0143 Repeat exceptional business requirement and risk assessment before transferring a waived clearance →EN 50126-2:2017 5.5 covers when and how the risk assessment is revised: new hazards, changes to the system or its context, in-service findings;
en-50126-en-50128-en-50129-railway-applications-rams::50126-2:5.5 · Revision of risk assessment →The risk assessment weighs the risk of running end-of-life software and hardware.
ffiec-cybersecurity-assessment-tool-cat::D1.RM.RA.E.3 · D1.RM.RA.E.3 Risk Assessment (Evolving 3) →Questions people ask about risk assessment
What is Risk Assessment?
Why is Risk Assessment important for compliance?
What concepts are related to Risk Assessment?
Which compliance frameworks address Risk Assessment?
Where can I learn more about Risk Assessment?
See how Risk Assessment applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.