BS PD 3002:2002

This guide addresses the topic of risk assessment in the context of BS 7799 and in particular the development and certification of BS 7799 information security and management systems. It aims at providing a common basis and understanding of the underlying concepts behind risk assessment and risk management, the terminology used, and the overall process and options for assessing and managing the risks.Cross References:PD 3001PD 3003PD 3004PD 3005ISO/IEC 17999:2000BS 7799-2:2002BS ISO/IEC TR 13335-1:1996BS ISO/IEC TR 13335-2:1997BS ISO/IEC TR 13335-3:1998BS ISO/IEC TR 13335-4:2000BS ISO/IEC TR 13335-5:2001ISO Guide 73:2002Also available on CD as part of BIP 0003.