Common Criteria of Information Technology Security Evaluation

If you are looking to address your business Risk Management Concept Flow, read the Common Criteria of Information Technology Security Evaluation published September 2006.

Here's the pdf link: 

http://www.commoncriteriaportal.org/files/ccfiles/CCPART1V3.1R1.pdf