Define o contexto e o âmbito de uma avaliação de riscos, para qualquer área: objetivos de negócio, locais, processos, partes interessadas e restrições, escalas de impacto e probabilidade, critérios de avaliação e aceitação dos riscos, e quem é responsável por quê.
Conteúdo
1. Contexto e objetivos de negócio
2. Âmbito
3. Partes interessadas e restrições
4. Critérios de impacto
5. Critérios de probabilidade
6. Critérios de avaliação e aceitação de riscos
7. Funções e responsabilidades
8. Controlo do documento
O que indica
Business objectives — What the organisation must achieve and protect.
Scope of the risk assessment — Only needed if you do not select a scope definition as a source. Activities, information and systems covered.
Sites in scope
Business processes in scope
Interested parties — E.g. “Customers”, “Regulator”, “Cloud provider”.
Constraints — Budget, deadlines, regulatory or technical constraints: one per entry.
Impact criteria to assess
Risks a risk owner may accept — Above this level a risk must be treated, or accepted by management.
Roles and owners — Who is responsible for which area. Owners in the result are taken from here; where no role covers an area, the owner is left for you to fill.
Additional context — Anything the service should take into account.
Title — As it will appear on the result.
Author — Shown as the author of the deliverable; never filled in by the AI.
Sections, in order — The template's sections are proposed, one per line in order: drag to reorder, rename, remove or add.
