Establishing the Context
Risk Identification and Analysis
Risk Evaluation
Disruption Scenarios Vulnerability analysis
Have the appropriate information resources been sourced? Have the appropriate documents and other information sources been reviewed? Has the scope of the risk assessment been determined and approved? Have evaluation criteria been developed? Have the disruption scenarios been developed? Have sources of potential disruption risks been identified? Have risks, their impacts and likelihoods been identified and assessed? Has the level of risk and the organisation’s tolerance to the each of the higher priority risks been determined? Have disruption scenarios been developed from the identified risks? Have organisational vulnerabilities to the risks/scenarios been identified? Total
0
0
0
Completed
Delayed
Issue
Not started
Element
On Target
Activity Status Comments
0
风险评估表 活动状态 元素
问题
建立环境
有适当来源的信息资源吗？
未启 动
延 迟
目 标
完成
0
0
0
0
适当的文件和其他信息来源已作出审查了吗？ 风险评估的范围已被确定，并批准吗？
风险识别和分析
风险评估
中断情况 易损性分析
评价标准制定了吗？ 假设的会引起混乱的可能设定了吗？ 已确定潜在的中断（混乱）风险来源吗？ 有关风险、 它们的影响和 发生可能性已被识别 和评估吗？ 对于风险优先度较高的每个风险级别和组织的容 忍程度确定了吗？ 已从已确定的风险中识别出潜在的混乱情况了 吗？ 已识别出在此情况下，组织的系统安全漏洞了 吗？ 共
注解