Difference between revisions of "Risk Identification"
Jump to navigation
Jump to search
Line 1: | Line 1: | ||
==Definitions== | ==Definitions== | ||
=== European Definitions === | === European Definitions === | ||
− | + | ====[[ENISA]]==== | |
+ | {{definition|Risk Identification is the process to find, list and characterize elements of [[risk]] (refers to [[ISO|ISO/IEC Guide 73]]). <ref name="ENISAGlos"> [http://www.enisa.europa.eu/activities/risk-management/current-risk/risk-management-inventory/glossary ENISA Risk Glossary]</ref>}}<br /> | ||
=== Other International Definitions === | === Other International Definitions === | ||
Line 44: | Line 45: | ||
[[Category:Risk]] | [[Category:Risk]] | ||
− | {{#set:defined by=Australia|defined by=Canada|defined by=Czech Republic|defined by=ISO}} | + | {{#set:defined by=ENISA|defined by=Australia|defined by=Canada|defined by=Czech Republic|defined by=ISO}} |
Revision as of 23:39, 20 July 2015
Contents
Definitions
European Definitions
ENISA
Risk Identification is the process to find, list and characterize elements of risk (refers to ISO/IEC Guide 73). [1]
Other International Definitions
National Definitions
Australia
Risk identification is the process of determining what can happen, why and how. [2]
Process of finding, recognizing and describing risks. [3]
Canada
The process of finding,recognizing and recording risk. [4]
Processus de recherche, de reconnaissance et d’enregistrement de risques. [5]
Processus de recherche, de reconnaissance et d’enregistrement de risques. [5]
Czech Republic
Process of looking for, recognizing, and describing risks (Proces hledání, rozpoznávání a popisování rizik). [6]
Standard Definition
ISO/IEC 27000:2014 and ISO 31000:2009
The standard defines risk assessment as
the "process of finding, recognizing and describing risks" [7] [8]. (based on the ISO Guide 73:2009[9])
- Risk identification involves the identification of risk sources, events, their causes and their potential consequences.
- Risk identification can involve historical data, theoretical analysis, informed and expert opinions, and stakeholders’ needs.
See also
Notes
- ↑ ENISA Risk Glossary
- ↑ Australian Emergency Management Glossary, Emergency Management Australia (1998)
- ↑ Australia AS NZS 5050 (2010)
- ↑ Derived from ISO 31000:2009
- ↑ Vocabulaire de la gestion des urgencies/Emergency Management Emergency Management Vocabulary 281 (2012)
- ↑ Cyber Security Explanatory Glossary (2013)
- ↑ ISO/IEC 27000:2014, Information technology -- Security techniques -- Information security management systems -- Overview and vocabulary.
- ↑ ISO/IEC 31000:2009, Risk management -- Principles and guidelines
- ↑ ISO Guide 73:2009 Risk management -- Vocabulary