Pesquisa de referências
Centro de Documentação

Risk management-risk assessment in European regulation, international guidelines and codes of practice
Recurso electrónico / electronic resource
MAP20120030473
Risk management-risk assessment in European regulation, international guidelines and codes of practice / conducted by the Technical Department of ENISA Section Risk Management in cooperation with J. Dumortier and Hans Graux. — Crete : ENISA, 2007
Sumario: The presented material can be used as a source of reference to existing legal frameworks. This is an inherent counterpart of initial phases of Risk Management / Risk Assessment where the applicable legal framework has to be identified (usually within the activity Definition of External Environment). It comprises one of the main parameters for the evaluation of impact of the assessed risks. The presented material has been grouped in categories according to the horizontal applicability of normative areas, e.g. Data Protection/Privacy, National Security, Civil and Penal Law, Corporate Governance, etc. The vertical applicability according to application areas (e.g. Telecommunications, Financial Services, Health and Commerce Services) has not been considered. This was due to the fact the relevance of legal requirements to application areas may vary according to the security context of information being processed within the application. Thus, vertical aspects seemed not to be stable enough to be use as basis for the classification
1. Gerencia de riesgos ‌. 2. Evaluación de riesgos ‌. 3. Seguridad de la información ‌. 4. Código de Buenas Prácticas ‌. 5. Análisis de riesgos ‌. 6. Código internacional ‌. 7. Unión Europea ‌. I. Dumortier, J. ‌. II. Graux, Hans ‌. III. European Network and Informatin Security Agency. Technical Department of Section Risk Management ‌.