[BS 7799-3:2006] Organizational context [Risk IT] RG and RE Domains more precisely RG1.2 Propose IT risk tolerance, RG2.1 Establish and maintain accountability for IT risk management RG2.3 Adapt IT risk practices to enterprise risk practices, RG2.4 Provide adequate resources for IT risk management, RE2.1 Define IT risk analysis scope. [ISO/IEC 27005:2008] 
Context establishment
C o n t e x t e s t a b l i s h m e n t
R i s k a s s e s s m e n t
R i s k t r e a t m e n t
R i s k a c c e p t a n c e
R i s k c o m m u n i c a t i o n
R i s k m o n i t o r i n g a n d r e v i e w