Define el contexto y el alcance de una evaluación de riesgos, para cualquier ámbito: objetivos de negocio, emplazamientos, procesos, partes interesadas y restricciones, escalas de impacto y probabilidad, criterios de valoración y aceptación de riesgos, y quién es responsable de qué.
Contenido
1. Contexto y objetivos de negocio
2. Alcance
3. Partes interesadas y restricciones
4. Criterios de impacto
5. Criterios de probabilidad
6. Criterios de valoración y aceptación de riesgos
7. Funciones y responsabilidades
8. Control del documento
Lo que usted aporta
Business objectives — What the organisation must achieve and protect.
Scope of the risk assessment — Only needed if you do not select a scope definition as a source. Activities, information and systems covered.
Sites in scope
Business processes in scope
Interested parties — E.g. “Customers”, “Regulator”, “Cloud provider”.
Constraints — Budget, deadlines, regulatory or technical constraints: one per entry.
Impact criteria to assess
Risks a risk owner may accept — Above this level a risk must be treated, or accepted by management.
Roles and owners — Who is responsible for which area. Owners in the result are taken from here; where no role covers an area, the owner is left for you to fill.
Additional context — Anything the service should take into account.
Title — As it will appear on the result.
Author — Shown as the author of the deliverable; never filled in by the AI.
Sections, in order — The template's sections are proposed, one per line in order: drag to reorder, rename, remove or add.
