Risk-Based Security
What is Risk-Based Security?
An approach to security that prioritizes investments and efforts based on the level of risk to the organization rather than applying uniform controls.
Frameworks that govern risk-based security
What the standards actually require on risk-based security
Requirements naming risk-based security across 4 standards, quoted from the control text.
Controller and processor implement technical and organisational measures giving security appropriate to the risk, particularly for special categories, taking account of the Federal Office for Information Security's technical guidelines and recommendations;
germany-federal-data-protection-act-bdsg::s64 · s 64 Implement risk-based security measures, including the fourteen control objectives for automated processing →The controller and processor take technical and organisational measures appropriate to the risk, especially for special categories, which may include pseudonymisation and encryption and must ensure confidentiality, integrity, availability and resilience and ti...
greece-law-46242019-hellenic-data-protection-authority-hdpa-implementation-act::Art.62 · Article 62: risk-based security with the thirteen automated-processing controls →Standard 7 per Section 35 + the Schedule of the Jamaica Data Protection Act 2020: Personal data shall be processed in a manner that ensures appropriate security including protection against unauthorised or unlawful processing + accidental loss + destruction or...
JM-DPA2020-Standard7-Security-Sec35-Appropriate-Technical-Organisational-Confidentiality-Integrity-Availability-Resilience · Jamaica DPA 2020 Standard 7 - Security + Section 35 + Appropriate Technical and Organisational Measures + Confidentiality + Integrity + Availability + Resilience + Encryption + Pseudonymisation + Risk-Based Security →Separate trusted from untrusted networks into risk-based security zones, configure physical and virtual networks to restrict and monitor those connections, reassess that design at least annually, and periodically re-justify every service, port and protocol in...
C5-COS-03 · Monitoring of connections in the Cloud Service Provider's network →Questions people ask about risk-based security
What is Risk-Based Security?
Why is Risk-Based Security important for compliance?
Which compliance frameworks address Risk-Based Security?
Where can I learn more about Risk-Based Security?
See how Risk-Based Security applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.