Français
4. The benefits and limitations of risk mapping
As with any methodological system, risk mapping has its limitations, which are detailed in this section, along with suggested principles for updating and maintaining the map in the face of these limitations.
4.1 The ten main limitations of risk mapping and how to overcome them
The first limitation is inherent in any work based on human judgment. It concerns the biases involved in gathering information on risks. These cognitive biases are inherent to all risk mapping work. They can be anchoring biases: the people asked to analyze risks see risks more from their own position and point of view, and even when questioned about the organization's more global risks, they will sometimes naturally revert to their points of reference. For example, a...
The Ultimate Scientific and Technical Reference
This article is included in
Security of information systems
This offer includes:
Knowledge Base
Updated and enriched with articles validated by our scientific committees
Services
A set of exclusive tools to complement the resources
Practical Path
Operational and didactic, to guarantee the acquisition of transversal skills
Doc & Quiz
Interactive articles with quizzes, for constructive reading
The benefits and limitations of risk mapping
Mandatory risk mapping
Bibliography
Bibliography
Standards and norms
- Information Technology – Safety technology – Information security management systems – Requirements - ISO/IEC 27001 - 2013
- Risk management – Guidelines, Operational implementation - ISO 31000 - 2018
Regulations
Article R. 4121-1 of the French Labor Code on the single assessment document.
Article L. -561-15 of the French Monetary and Financial Code on LCB-FT vigilance.
Article 17 of the "Sapin II" law, a law on transparency, action against corruption and the modernization of economic life.
European DORA regulation: Digital Operational Resilience ACT (directive...
The Ultimate Scientific and Technical Reference
