Skip to main content

3 docs tagged with "canon"

View all tags

Advanced Recommendations for Risk Classification

This annex presents non-mandatory but highly recommended practices for organisations that wish to reach higher levels of maturity and auditability in risk management applied to the software lifecycle.

Relevant policies

The effective adoption of Chapter 01 - Risk Management - requires the existence of formal organisational policies that frame, legitimise and sustain the application of the practices described in this chapter.