rsk-01-riskmanagementprogram.md

SCF - RSK-01 - Risk Management Program

Mechanisms exist to facilitate the implementation of risk management controls.

Mapped framework controls

GDPR

• Art 32.1
• Art 32.2

ISO 27001

• 6.1.1.a
• 6.1.1.b
• 6.1.1.c
• 6.1.1.d
• 6.1.1.e.1
• 6.1.1.e.2
• 6.1.1
• 6.1.2.a.1
• 6.1.2.a.2
• 6.1.2.a
• 6.1.2.b
• 6.1.2.c.1
• 6.1.2.c.2
• 6.1.2.c
• 6.1.2.d.1
• 6.1.2.d.2
• 6.1.2.d.3
• 6.1.2.d
• 6.1.2.e.1
• 6.1.2.e.2
• 6.1.2.e
• 6.1.2
• 6.1
• 8.2

ISO 27002

• A.7.5

NIST 800-53

• RA-1

SOC 2

• CC1.3
• CC3.1
• CC4.1
• CC5.1

Control questions

Does the organization facilitate the implementation of risk management controls?