Information technology — Process assessment — Guidance for process risk determination

This document provides guidance on the application of the results of a process assessment for process risk determination.

The guidance provided does not presume specific organizational structures, management philosophies, life cycle models or development methods. In relation to process risk determination, this guidance is applicable within any customer?supplier relationship, and to any organization wishing to perform a process risk determination of its processes.