Risk Tolerance

From CIPedia
Revision as of 21:27, 9 May 2016 by Eluiijf (talk | contribs)
Jump to navigation Jump to search

Definitions

European Definitions

Other International Definitions

ITU-T

Risk tolerance means the degree of exposure to security risk acceptable to policy makers/business owners. [1]


National Definitions

United States

NIST
The level of risk an entity is willing to assume in order to achieve a potential desired result. [2]


Standard Definition

See also

Notes

  1. ITU Study Group Q.22/1 Report on Best Practices for a National Approach to Cybersecurity: A Management Framework for Organizing National Cybersecurity Efforts, ITU-D Secretariat, Geneva (2008).
  2. NISTIR 7298 rev 2: Glossary of Key Information Security Terms, May 2013