Difference between revisions of "Risk Acceptance"
Jump to navigation
Jump to search
(→Portugal) |
|||
| Line 15: | Line 15: | ||
{{definition|Přijetí rizika: Rozhodnutí přijmout riziko. <ref>[http://www.govcert.cz/download/nodeid-561 Výkladový slovník kybernetické bezpečnosti (2013)]</ref><br/><br/>Risk acceptance: Decision to accept [[risk]]. <ref>[http://www.govcert.cz/download/nodeid-3555/ Cyber Security Explanatory Glossary (2013)]</ref>}}<br /><br/> | {{definition|Přijetí rizika: Rozhodnutí přijmout riziko. <ref>[http://www.govcert.cz/download/nodeid-561 Výkladový slovník kybernetické bezpečnosti (2013)]</ref><br/><br/>Risk acceptance: Decision to accept [[risk]]. <ref>[http://www.govcert.cz/download/nodeid-3555/ Cyber Security Explanatory Glossary (2013)]</ref>}}<br /><br/> | ||
====[[Portugal]] ==== | ====[[Portugal]] ==== | ||
| − | {{definition|Aceitação do Risco: [Definição] Decisão de aceitar a persistência de um risco residual após o tratamento do risco | + | {{definition|Aceitação do Risco: [Definição] Decisão de aceitar a persistência de um risco residual após o tratamento do [[risk|risco]]. <ref>[https://www.cncs.gov.pt/recursos/glossario/ Glossário Centro National de Cibersegurança Portugal]</ref>}}<br /><br/> |
| + | |||
==== [[United States]] ==== | ==== [[United States]] ==== | ||
===== [[DHS]] ===== | ===== [[DHS]] ===== | ||
Revision as of 01:30, 18 December 2016
Contents
Definitions
European Definitions
ENISA
Risk Acceptance concerns the communication of residual risks to the decision makers. [1]
Risk Acceptance is the potential that a given threat will exploit vulnerabilities of an asset or group of assets and thereby cause harm to the organization (ISO/IEC PDTR 13335-1). [2]
National Definitions
Australia
Risk acceptance is an informed decision to accept the likelihood and the consequences of a particular risk. [3]
Czech Republic
Portugal
Aceitação do Risco: [Definição] Decisão de aceitar a persistência de um risco residual após o tratamento do risco. [6]
United States
DHS
Risk acceptance is an explicit or implicit decision not to take an action that would affect all or part of a particular risk. [7]
Standard Definition
See also
Notes
- ↑ ENISA Risk Acceptance
- ↑ ENISA Risk Glossary
- ↑ Australian Emergency Management Glossary, Emergency Management Australia (1998)
- ↑ Výkladový slovník kybernetické bezpečnosti (2013)
- ↑ Cyber Security Explanatory Glossary (2013)
- ↑ Glossário Centro National de Cibersegurança Portugal
- ↑ DHS Risk Lexicon 2010 Edition, September 2010
