Risk Framework
What is Risk Framework?
A structured approach that provides the principles, policies, and processes for managing risk consistently across an organization.
Terms that appear alongside risk framework
Each of these is named in at least one of the same controls as risk framework. The number is how many controls name both.
- governance 12 shared controls
- iso 31000 6 shared controls
- iso 27005 5 shared controls
- policy 3 shared controls
- risk governance 3 shared controls
- risk management policy 2 shared controls
- governance structure 2 shared controls
- risk culture 2 shared controls
Frameworks that govern risk framework
What the standards actually require on risk framework
Requirements naming risk framework across 6 standards, quoted from the control text.
Regular monitoring confirms that the framework is embedded and the CS&IA posture is as expected, with adjustments where performance is weak. Documented response procedures state what happens, and who acts, when risks or KPIs and KRIs breach tolerance.
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.1-MON · Monitoring the risk framework →The governing body should weigh and manage the risk arising from its own activities within the organization's risk framework. It should: make sure it is told, fully and early, about new and emerging risk;
iso-37000-2021::6.9.3.3 · 6.9.3.3 Practise effective risk management →Risk management frameworks such as ISO 31000 and the security and privacy risk frameworks already used for technical systems can be applied to AI systems to identify, analyse, evaluate and treat the risks to trustworthiness, with the report considering how AI-...
iso-iec-tr-24028-2020::5.4 · Application of risk management →Operational resilience is overseen. Foundational: board and senior management ownership; monitoring through the risk framework and control environment;
principles-for-doing-business-at-lloyd-s::P12.2 · 12.2 Maintain oversight of operational resilience through governance and the risk and control environment →Security convergence brings individual PAP systems under security risk management principles and ties them into the wider security systems and the risk management of the whole enterprise as one managed process.
ansi-asis-pap-1-2012-physical-asset-protection::B.1.4 · B.1.4 Security convergence of physical and information security risk management →Banks subject to the market risk framework publish annual Table MRA on market risk objectives and policies and semiannual MR1 (standardised approach) or MR3 (simplified standardised approach);
basel-iii-international-banking-framework::DIS50-70 · Disclose market risk, CVA risk, operational risk and IRRBB →Questions people ask about risk framework
What is Risk Framework?
Why is Risk Framework important for compliance?
Which compliance frameworks address Risk Framework?
Where can I learn more about Risk Framework?
See how Risk Framework applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.