Transcription of Security Risk Assessment & Audit
{{id}} {{{paragraph}}}
Office of the Government Chief Information Officer I N F O R M A T I O N S E C U R ITY Practice guide for Security Risk Assessment & Audit [ISPG-SM01] Version November 2017 Office of the Government Chief Information Officer The Government of the Hong Kong Special Administrative Region The contents of this document remain the property of and may not be reproduced in whole or in part without the express permission of the Office of the Government Chief Information Officer COPYRIGHT NOTICE 2017 by the Government of the Hong Kong Special Administrative Region Unless otherwise indicated, the copyright in the works contained in this publication is owned by the Government of the Hong Kong Special Administrative Region. You may generally copy and distribute these materials in any format or medium provided the following conditions are met (a) the particular item has not been specifically indicated to be excluded and is therefore not to be copied or distributed; (b) the copying is not done for the purpose of creating copies for sale; (c) the materials must be reproduced accurately and must not be used in a misleading context; and (d) the copies shall be accompanied by the words "copied/distributed with the permission of the Government of the Hong Kong Special Administrative Region.
Practice Guide for Security Risk Assessment and Audit 1 1. Introduction Information Technology (IT) security risk assessment and security audit are the major components of information security management. This document provides a reference model to facilitate the alignment on the coverage, methodology, and
Domain:
Source:
Link to this page:
Please notify us if you found a problem with this document:
{{id}} {{{paragraph}}}