List of Figures

Figure 1

Overview of ISO 27001 certification process

Figure 2

ISO 73 Generic Risk Process

Figure 3

Comparison between 'Qualitative' and 'Quantitative' risk processes

Figure 4

The AS/NZS 4360 risk process

Figure 5

The relationship between risk assessment and selection of controls

Figure 6

Modelling business processes (1)

Figure 7

Modelling business processes (2)