The System and Information Assets Classification Framework maps to the potential impact levels and risk appetite defined in the board endorsed Risk Framework.

Risk Framework

The Risk Framework defining levels of potential impact across a variety of Risk Categories, along with the definitions of Likelihood, the corresponding Risk Matrix and Risk Appetite.

Asset Classification

The Confidentiality, Integrity and Availability Information Asset Classification labels mapped to both the Risk Framework potential impacts and the Impact Baselines used for System Classification.