Parameters | Parameter type | Constraints |
|---|---|---|
Risk Context | Processes, Applications, org-units, business lines | Not mandatory. |
Objectives and Requirements | Objectives, requirements | Not mandatory. |
Target Risks | risk | Not mandatory. |
Controls | control | Not mandatory. |
Incidents | incident | Not mandatory. |
Finding | findings | Not mandatory. |