Français
2. Common methodology for risk mapping
2.1 Dual top-down and bottom-up approach
The idea of risk mapping is first and foremost centered on its purpose, its uses as described above. These uses can be many and varied, and for this reason, distinguishing between a top-down and bottom-up approach to risk mapping has several advantages:
ask the question: what is the purpose of the exchanges in terms of risk, what do we want to do with risk mapping, and at what levels? (the what to do);
We need to find the right contacts to gather the right level of information and encourage discussion with the right people, so that we can not only make progress in identifying and managing risks, but also derive action plans for the most important risks (the who)....
The Ultimate Scientific and Technical Reference
This article is included in
Security of information systems
This offer includes:
Knowledge Base
Updated and enriched with articles validated by our scientific committees
Services
A set of exclusive tools to complement the resources
Practical Path
Operational and didactic, to guarantee the acquisition of transversal skills
Doc & Quiz
Interactive articles with quizzes, for constructive reading
Common methodology for risk mapping
Alternative approaches to risk mapping
Bibliography
Bibliography
Standards and norms
- Information Technology – Safety technology – Information security management systems – Requirements - ISO/IEC 27001 - 2013
- Risk management – Guidelines, Operational implementation - ISO 31000 - 2018
Regulations
Article R. 4121-1 of the French Labor Code on the single assessment document.
Article L. -561-15 of the French Monetary and Financial Code on LCB-FT vigilance.
Article 17 of the "Sapin II" law, a law on transparency, action against corruption and the modernization of economic life.
European DORA regulation: Digital Operational Resilience ACT (directive...
The Ultimate Scientific and Technical Reference
