Risk Assessment

Often a risk assessment is seen as something that is accomplished at a single point in time and as a stand-alone, static document; this is far from accurate. The security risk assessment should be a dynamic process that lays the foundation for a successful information security program. Performing a security risk assessment is often considered the first major step in the creation and management of an effective information security program. Many other components that comprise an information security program are established through the efforts put forth in the risk assessment.

 

Components of an Information Security Risk Assessment

Gather Data

• Information & Technology Assets
• Threats to the Assets (Business & Customer/Member)
• Vulnerabilities
• Existing Security Controls & Process
• Security Standards and & Requirements

Analyze Probabilities & Impacts

• Known Threats
• Vulnerabilities to Assets

Prioritize Risks to Determine Required

• Training
• Controls

HEIT Has a proven track record with the required compliance experience to provide a streamlined, risk-based & cost effective approach to meeting your Risk Assessment needs. Contact HEIT today for more information.