This is a site designed to make it easier to take the core of large published reports and allow anyone to comment on them.
2.2.16 In these cases, the countermeasures that are not met and the reasoning
behind this must be clearly documented in the Risk Management and
Accreditation Document Set (RMADS) for the service.27 Residual risks should be
mitigated, where possible, through the application of appropriate procedural,
physical and personnel measures. Important factors in determining the
appropriate risk level include the the residual risk that the risk owner is prepared
to accept, and prerequisite requirements for any envisaged onward connections.
Support and advice from technical experts is essential to properly inform risk-