Functions of an Information Security Management System
Identify
Identify information assets and determine their protection requirements in terms of confidentiality, integrity, and availability.
Rate
Analyzing risks: Systematically categorizing vulnerabilities, threats, and probabilities of occurrence.
Treat
Manage risks by choosing one of the following approaches: avoid, reduce, or accept.
Certipedia – TÜV Rheinland Database for all Tested and Certified Products, Services and Organizations.