Select and design controls
Sign in to save your workSelect the controls this case needs, then design them properly for your two most serious risks. A policy statement is not a control: every control needs an owner, an operation and evidence.
Control checklist
Governance
0/4Content and retrieval
0/4Access control
0/3Privacy and data
0/3Output quality
0/3Supplier
0/3Incident response
0/3Risk-control matrix entry 1
Which register entry?
Stops the event or reduces its likelihood
Finds the event or the failure quickly
Responds, remediates and restores
Who operates the controls?
Records, logs, reports, samples
Design test and operating test
Answers save automatically and sync to your account when you are signed in.
Risk-control matrix entry 2
Which register entry?
Stops the event or reduces its likelihood
Finds the event or the failure quickly
Responds, remediates and restores
Who operates the controls?
Records, logs, reports, samples
Design test and operating test
Answers save automatically and sync to your account when you are signed in.