richardk/iso27diy-corp
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Cleaned up Literature folder

Browse source
This commit is contained in:
Richard Kranendonk 2026-05-18 12:48:01 +02:00
parent 73a6380034
commit fe5eda4e05
586 changed files with 53911 additions and 2475 deletions
Download patch file Download diff file Expand all files Collapse all files

7
Corpus/ISMS/Transfer in Risk Treatment.md Normal file
View file

@ -0,0 +1,7 @@
There's a difference in transfering a Risk (i.e. transfering Risk Ownership) and transfering the responsibility for managing the risk.
Who should be appointed as Risk Owner?
Consider this example: the reception makes keys available to visitors, but says it isn't able to keep a proper administration because of lack of time.
Reception argues it is the responsibility of Facilities.
This begs the question: Who is responsible for granting access to rooms?