يحدد سياق تقييم المخاطر ونطاقه، لأي مجال: أهداف العمل، والمواقع، والعمليات، والأطراف المعنية، والقيود، ومقاييس الأثر والاحتمالية، ومعايير تقييم المخاطر وقبولها، ومن المسؤول عن ماذا.
المحتوى
1. السياق وأهداف الأعمال
2. النطاق
3. الأطراف المعنية والقيود
4. معايير الأثر
5. معايير الاحتمالية
6. معايير تقدير المخاطر وقبولها
7. الأدوار والمسؤوليات
8. ضبط الوثيقة
ما تقدمونه
Business objectives — What the organisation must achieve and protect.
Scope of the risk assessment — Only needed if you do not select a scope definition as a source. Activities, information and systems covered.
Sites in scope
Business processes in scope
Interested parties — E.g. “Customers”, “Regulator”, “Cloud provider”.
Constraints — Budget, deadlines, regulatory or technical constraints: one per entry.
Impact criteria to assess
Risks a risk owner may accept — Above this level a risk must be treated, or accepted by management.
Roles and owners — Who is responsible for which area. Owners in the result are taken from here; where no role covers an area, the owner is left for you to fill.
Additional context — Anything the service should take into account.
Title — As it will appear on the result.
Author — Shown as the author of the deliverable; never filled in by the AI.
Sections, in order — The template's sections are proposed, one per line in order: drag to reorder, rename, remove or add.
