IDE-04 Security risk identification
1 action under this Identify principle in Essentials for enterprise IT. Each action links to plain-English guidance, audit tips and cross-framework mappings.
ASD principle statement
Security risks for an organisation and their systems (infrastructure, operating systems, applications and data) are identified, including by using current strategic and sector-specific cyber threat intelligence and threat modelling, and are documented along with any associated risk management decisions.
Quoted as published. Everything else on this page is written by Control Stack.
- Function
- Identify
- Domains
The action
- IT.IDE-04.1Feed Continuously Reviewed Threat Intelligence and Weaknesses into Risk Assessments
Factors the weak spots, attacker methods and behaviours relevant to the organisation into every risk assessment, and reviews them continually.
Domains:Visibility and response
Back to the full ASD Essentials for enterprise IT action list, or browse the complete control library.