Terms of reference against which the significance of a risk is evaluated.
Source(s):
NIST SP 800-160v1r1
from
ISO Guide 73
Terms of reference against which the significance of a risk is evaluated, such as organizational objectives, internal/external context, and mandatory requirements (e.g., standards, laws, policies).
Source(s):
NISTIR 8286B
from
ISO Guide 73