THR-10
Threat Analysis
Description
Mechanisms exist to identify, assess, prioritize and document the potential impact(s) and likelihood(s) of applicable internal and external threats.
Control Question
Does the organization identify, assess, prioritize and document the potential impact(s) and likelihood(s) of applicable internal and external threats?
Control Metadata
Domain:
Threat Management
Validation Cadence:
Annual
Evidence Request List:
E-THR-07