Définit le contexte et le périmètre d'une appréciation des risques, pour tout domaine : objectifs métier, sites, processus, parties intéressées et contraintes, échelles d'impact et de vraisemblance, critères d'évaluation et d'acceptation des risques, et qui est responsable de quoi.
Contenu
1. Contexte et objectifs métier
2. Périmètre
3. Parties intéressées et contraintes
4. Critères d'impact
5. Critères de vraisemblance
6. Critères d'évaluation et d'acceptation des risques
7. Rôles et responsabilités
8. Maîtrise du document
Ce que vous fournissez
Business objectives — What the organisation must achieve and protect.
Scope of the risk assessment — Only needed if you do not select a scope definition as a source. Activities, information and systems covered.
Sites in scope
Business processes in scope
Interested parties — E.g. “Customers”, “Regulator”, “Cloud provider”.
Constraints — Budget, deadlines, regulatory or technical constraints: one per entry.
Impact criteria to assess
Risks a risk owner may accept — Above this level a risk must be treated, or accepted by management.
Roles and owners — Who is responsible for which area. Owners in the result are taken from here; where no role covers an area, the owner is left for you to fill.
Additional context — Anything the service should take into account.
Title — As it will appear on the result.
Author — Shown as the author of the deliverable; never filled in by the AI.
Sections, in order — The template's sections are proposed, one per line in order: drag to reorder, rename, remove or add.
