2 docs tagged with "control-rating"

Define a repository's control types, the control rating scale, and the key/non-key weighting percentages that feed residual risk — and download the repository's control assessments as a spreadsheet.

How the platform derives a risk's inherent value, combines mitigating control ratings, and calculates the residual risk, for both Standard and Value risks.