| ▲ | 1970-01-01 3 hours ago | |
The risk register is ISO 27001. The "I" in ISO doesn't stand for Internet, it stands for international. You shouldn't be doing business with international customers if you don't have a risk register, which is why they're requesting it. | ||
| ▲ | SkinTaco 2 hours ago | parent [-] | |
Why is the line drawn at being international? What is it about customers in Ethiopia that necessitates this? What is it about American (non-international) customers that doesn't require a register? | ||