Risk Evaluation
Process of comparing the estimated risk against given risk criteria to determine the significance of the risk.
Source:
[ISO/IEC 27000:2009(E)] ISO/IEC 27000:2009(E) Information Technology - Security techniques - Information security management systems - Overview and vocabulary.
