Risk register
Total identifed risks: 16
of identified risks are addressed.
Mitigated
11
Transferred
1
Accepted
4
Monitoring Status
| Item | Description | Frequency | Status |
|---|---|---|---|
 ISMS Policies Last updated: October 2025 | Multiple policies are published and reviewed on annual basis. | Annual | OK |
 Risk Assessment & Treatment Last updated: June 2025 | All identified risks are either mitigated, or provisionally accepted. | Annual | OK |
 Incident Management Last updated: October 2025 | No (Major) incident reported in the last 90 days. | Quarterly | OK |
 Automated Backup Last updated: October 2025 | Data critical to business is safely preseerved according to 3-2-1 backup strategy. | Weekly | OK |
 Vendor Management Last updated: October 2025 | Vendors security posture is assessed prior to onboarding and periodically reviewed. | Monthly | OK |
 IAM Reviews Last updated: October 2025 | Principle of least privilege is enforced. IAM is actively reviewed, and excessive access is revoked. | Quarterly | OK |
 Physical Security Last updated: November 2025 | Principle of least privilege is enforced. IAM is actively reviewed, and excessive access is revoked. | Monthly | OK |