8. Glossary
Top-down approach
An exchange method aimed at achieving consensus on the organization's main (strategic and major) risks, based more on the vision of risks held by the organization's governance and general management, and by redeploying this vision to the operating entities.
Bottom-up approach
A method for discussing risks, mainly operational risks, with the teams in charge of the perimeters studied, as well as with business experts. The aim of this method is to provide a detailed analysis of the risks inherent in the processes and departments studied as part of the risk mapping process.
EDMR; risk management devices
Elements of risk management (organization, controls, human resources, tools).
Heat map
Two-entry matrix...
The Ultimate Scientific and Technical Reference
This article is included in
Security of information systems
This offer includes:
Knowledge Base
Updated and enriched with articles validated by our scientific committees
Services
A set of exclusive tools to complement the resources
Practical Path
Operational and didactic, to guarantee the acquisition of transversal skills
Doc & Quiz
Interactive articles with quizzes, for constructive reading
Glossary
Bibliography
Bibliography
Standards and norms
- Information Technology – Safety technology – Information security management systems – Requirements - ISO/IEC 27001 - 2013
- Risk management – Guidelines, Operational implementation - ISO 31000 - 2018
Regulations
Article R. 4121-1 of the French Labor Code on the single assessment document.
Article L. -561-15 of the French Monetary and Financial Code on LCB-FT vigilance.
Article 17 of the "Sapin II" law, a law on transparency, action against corruption and the modernization of economic life.
European DORA regulation: Digital Operational Resilience ACT (directive...
The Ultimate Scientific and Technical Reference
