Difference between revisions of "Risk Evaluation"

From CIPedia
Jump to navigation Jump to search
(ISO/IEC 27000:2014)
(National Definitions)
Line 7: Line 7:
  
 
=== National Definitions ===
 
=== National Definitions ===
 
+
==== Australia ====
 +
{{definition| Risk evaluation is the process in which judgements are made on the tolerability of the risk on the basis of [[Risk Analysis|risk analysis]]  and taking into account factors such as socioeconomic and environmental aspects.  <ref name="MAIMAus">[https://www.em.gov.au/Documents/Manual03-AEMGlossary.PDF Australian Emergency Management Glossary, Emergency Management Australia (1998)]</ref>}}
 +
<br />
 +
{{definition| Risk evaluation is the process used to prioritise risks.  <ref name="MAIMAus">[https://www.em.gov.au/Documents/Manual03-AEMGlossary.PDF Australian Emergency Management Glossary, Emergency Management Australia (1998)]</ref>}}
 +
<br />
  
 
===Standard Definition===
 
===Standard Definition===

Revision as of 00:24, 24 May 2015

Definitions

European Definitions

Other International Definitions

National Definitions

Australia

Risk evaluation is the process in which judgements are made on the tolerability of the risk on the basis of risk analysis and taking into account factors such as socioeconomic and environmental aspects. [1]


Risk evaluation is the process used to prioritise risks. [1]


Standard Definition

ISO/IEC 27000:2014

Process of comparing the results of risk analysis with risk criteria to determine whether the riskand/or its magnitude is acceptable or tolerable [2](based on the ISO Guide 73:2009[3]).

  • Risk criteria are the terms of reference against which the significance of risk is evaluated [3]). They are based on organizational objectives, and external and internal context, and can be derived from standards, laws, policies and other requirements.
  • Risk evaluation assists in the decision about risk treatment.

See also

Notes