This is a site designed to make it easier to
take the core of large published reports and
allow anyone to comment on them.
A.2.89 A risk is the potential that a given threat wil exploit a compromise path to
compromise one or more information assets. If there is no business impact of
compromise, or no likelihood of the risk being realised, there is no risk.
Email this to a friend.
Previous item —
We only allow the following html tags em strong blockquote p br. After posting, there may be a short delay before your comment appears on the site