Risk management

At Dockx Rhenus Archisafe, regular risk management is carried out for the individual information systems, specific system components and work processes. This risk management includes the identification, quantification and prioritization of risks. The results of these analyses are used to define, implement and monitor appropriate measures for dealing with risks. The main objectives of risk management are to reduce and avoid risks. In addition to the processes, other information assets, such as the security archive and its employees, are subject to regular risk assessment. Risk management is carried out and documented regularly as part of ISO 27001. The effectiveness of the measures resulting from risk management is reviewed in regular internal audits. Deviations and potential for improvement are documented, evaluated and, if necessary, necessary measures are defined and implemented. Measures to improve information security are in turn derived from the audit results in order to ensure continuous optimization of data security.