Advanced Recommendations for Risk Classification
This annex presents non-mandatory but highly recommended practices for organisations that wish to reach higher levels of maturity and auditability in risk management applied to the software lifecycle.
This annex presents non-mandatory but highly recommended practices for organisations that wish to reach higher levels of maturity and auditability in risk management applied to the software lifecycle.
The effective adoption of Chapter 01 - Risk Management - requires the existence of formal organisational policies that frame, legitimise and sustain the application of the practices described in this chapter.
This checklist applies to all applications classified according to the criteria defined in Chapter 01 - Application Criticality Classification.