Risk register
Total identifed risks: 16
of identified risks are addressed.
Mitigated
11
Transferred
1
Accepted
4
Monitoring Status
| Item | Description | Frequency | Status |
|---|---|---|---|
 ISMS Policies Last updated: November 2025 | All policies are reviewed at least once a year. | Annual | OK |
 Risk Assessment & Treatment Last updated: November 2025 | All identified risks are either mitigated, or provisionally accepted. | Annual | OK |
 Vendor Management Last updated: November 2025 | Vendors security posture is assessed prior to onboarding and periodically reviewed. | Quarterly | OK |
 IAM Reviews Last updated: October 2025 | Principle of least privilege is enforced. IAM is actively reviewed, and excessive access is revoked. | Quarterly | OK |
 Physical Security Last updated: November 2025 | Principle of least privilege is enforced. IAM is actively reviewed, and excessive access is revoked. | Monthly | OK |
 Incident Management Last updated: November 2025 | Website down due to cloudflare incident on 18 November 2025, and resolved within few hours. No further incident reported in the past month. | Monthly | Warning |
 Automated Backup Last updated: November 2025 | Data critical to business is safely preseerved according to 3-2-1 backup strategy. | Daily | OK |