Risk Assessment Method (IS1) and has been tailored to suit a commercial environment. To implement the method, many sources … compliance and governance frameworks. The method employed by BT is based on the UK Government’s Infosec Standard No. 1: Residual …