Skip to Content

ISMS Settings

Last modified by Lee Pedley on 2026/09/21 21:34
ISMS operating settings
These are your organisation's operating defaults for this XWiki ISMS. They are not prescribed by ISO/IEC 27001. Set them to match your approved risk methodology and review cycles.

Organisation

Organisation name
Comfy Group
Used on management and reporting pages.

Risk scoring

RatingScore rangeMeaning in this application
Low1 to 4Within the configured Low band.
ModerateAbove 4 to 9Within the configured Moderate band.
HighAbove 9 to 14Within the configured High band.
CriticalAbove 14 to 25Highest configured band.
Residual risk review threshold
15 or higher
Open risks meeting this residual score are flagged on the dashboard for management review.

Reminder windows

Control reviews
30 days
Warn before or after the control Next Review Date.
Evidence expiry
30 days
Warn before or after the Evidence Valid Until date.
Document reviews
30 days
Warn before or after the controlled document Next Review Date.
Edit settingsView risk methodologyBack to dashboard