The risk register and risk acceptance agreement support the organization in keeping a grip on risks for which no or no good measure has yet been found to adequately mitigate the risks to an acceptable level for the organization.
The risk register ensures that the right things are recorded and brings total risk visibility into a convenient format so that management reports can be made to management or the board from it. Additionally, the risk register is a result of the BIO which states that government measures (and associated risks) that cannot yet be fully met and must be tracked by the organization.
Click here to download the Risk Register and Risk Acceptance Agreement (RAO) Guide.
This news item can also be found in the files Information Security and Accountability
