HOPEX IT Risk Management : HOPEX IT Risk Management : Managing inventories : Inventory of Requirements and Regulations
   
Inventory of Requirements and Regulations
 
Accessing Requirements and Regulations
Characteristics of regulations
Requirement Characteristics
Accessing Requirements and Regulations
To access requirements and regulations:
1. See "Accessing the IT Inventory".
2. Click Regulations and Requirements.
The regulations and requirements tree appears.
Characteristics of regulations
*A regulation or regulatory framework is a set of directives, compulsory or not, defined by a government in a law, by standard bodies as "best practices" or as an internal policy in an organization.
For more details, see “Regulation Characteristics", page 477.
In the regulations page, you can connect:
business processes (in the Scope section)
sub-regulations
requirements
Requirement Characteristics
*A requirement is a need or expectation explicitly expressed, imposed as a constraint to be respected within the context of a project. This project can be a certification project or an organizational project or an information system project.
For more details, see “Requirement Characteristics", page 479.
To specify the parameter for a requirement:
*In the requirement properties, select the Scope page.
In the Contributing Elements page, you can specify:
Control Types
*A control type allows the classification of controls implemented in a company in accordance with regulatory or domain specific standards (Cobit, etc.).
Controls