Risk management · 5 answer guides
How to answer risk management questions in a security questionnaire
Risk assessments, treatment, reporting, policy exceptions, and regulator contacts. Buyers want to see that security decisions follow a process and not a hunch.
Risk assessment
How do you conduct risk assessments?Risk treatment
Describe your risk treatment process.Risk reporting
How do you measure and report on risk?Policy exception process
Do you have a formal policy exception process?Regulator and law enforcement contacts
Do you maintain points of contact for regulatory and law enforcement authorities?