ExportableProof — Routines today. Proof tomorrow.

Process

Risk Management Plan

Define the information security risk management approach, scope, roles, methodology, risk appetite, treatment process, review cadence and reporting model.

Back to demo

Demo. This is an Arcfield simulation, not a customer record. Provided as-is, without warranty. It does not replace professional legal, audit, or certification advice.

OSCAL source · RMP

{
  "artifactId": "RMP",
  "iso": [
    "A.5.36",
    "A.8.8",
    "6.1"
  ],
  "catalog": [
    {
      "iso": "A.5.36",
      "oscalId": "iso27001-a.5.36",
      "title": "Compliance with policies, rules and standards for information security",
      "className": "iso27001-annex-a",
      "group": "Organizational controls (Annex A.5)"
    },
    {
      "iso": "A.8.8",
      "oscalId": "iso27001-a.8.8",
      "title": "Management of technical vulnerabilities",
      "className": "iso27001-annex-a",
      "group": "Technological controls (Annex A.8)"
    }
  ],
  "profileAlters": [
    {
      "control-id": "iso27001-a.5.36",
      "adds": [
        {
          "props": [
            {
              "name": "applicability",
              "value": "applicable"
            },
            {
              "name": "applicability-justification",
              "value": "Required to verify compliance with ISMS requirements."
            },
            {
              "name": "implementation-status",
              "value": "Implemented"
            }
          ]
        }
      ]
    },
    {
      "control-id": "iso27001-a.8.8",
      "adds": [
        {
          "props": [
            {
              "name": "applicability",
              "value": "applicable"
            },
            {
              "name": "applicability-justification",
              "value": "Required for software and cloud services."
            },
            {
              "name": "implementation-status",
              "value": "In progress"
            }
          ]
        }
      ]
    }
  ],
  "components": [],
  "sspImplementedRequirements": []
}

Check installation

What is installed here. Extra volumes are optional and do not change Ready. Update re-runs the check.

CheckResult
Webserver…
Python…
Volumes…
Scripts…
Ready…
Working directory…
Last update…