Risk Treatment. Processor maintains a formal and effective risk treatment program to identify and protect against potential threats to the security, integrity or confidentiality of Personal Data.
Risk Treatment. 742 The treatment of risks related to digital dependencies, to threats and influences or likelihood/frequency 743 of events, can be based on a set of policies, measures, involving human resources, digital capabilities, 744 infrastructure and physical resources. 745 The treatment of risks can be related to dimensions including, but not limited to, resilience, 746 indispensability, dispensability, protection, interoperability, openness 747 By developing a risk management strategy covering, but not limited to, identification, assessment, 748 monitoring of dependencies, threats and influences and related risks, anticipation, adaptation, 6 xxxxx://xxxxxxx-xxxxxxxx.xx.xxxxxx.xx/en/library/declaration-european-digital-rights-and-principles 749 recovering, protection, intervention, an organization may consider itself strategically autonomous and 750 digitally sovereign. 751 For an organization, its governing body can set the high-level principles from which organizational and 752 technical measures can be derived (metrics, actions for staff, etc.). 753 8. Implications on standardization 754 8.1Preliminary considerations on standardization organizations 755 It is recommended that standardization organizations observe the principles of Digital Sovereignty and 756 ensure: 757 • awareness of the standardization participants’ interests and goals. In that regard, transparency is 758 essential, 759 • management of undue influences and dependencies in standardization, 760 • management of standardization actors that do not exhibit social responsibilities behaviours, 761 • sound organizational integrity so that standards are chosen on merit. 762 There are also concerns regarding the time it takes to develop standards. Indeed, in a fast technological 763 pace, it is essential that standards are developed in due time, and do not lag behind market developments, 764 in order to limit potential risks related to Digital Sovereignty. .
Risk Treatment. Having identified and assessed the risks, the risk owners will determine whether existing control mechanisms can contain any risks below ALARP or SFAIRP as applicable or if treatment is required. They will do this by referring to the project Risk Assessment Matrix to evaluate risks for likelihood, consequence and severity. All risks whose severity is ranked highly at a certain threshold level and/or that have potentially catastrophic consequences, will have a dedicated treatment developed to proactively mitigate the risk. Incorporating regular review, the allocated risk owners will be responsible for ensuring that the treatment actions identified are performed in a timely and effective manner as prescribed on the Risk Register.
Risk Treatment. TeleSign maintains a formal and effective risk treatment program that includes penetration testing, vulnerability management and patch management to identify and protect against potential threats to the security, integrity or confidentiality of Client Data.
Risk Treatment. Company maintains a formal and effective risk treatment program that includes penetration testing, vulnerability management and patch management to identify and protect against potential threats to the security, integrity or confidentiality of Customer Personal Data.
