OUR IT RISK

managment

services approach

As reliance on computer systems and electronic data has grown, information security risk has joined the array of risks that governments and businesses must manage. Regardless of the types of risk being considered, all Certcube risk assessments generally include the following elements

• Identifying threats that could harm and, thus, adversely affect critical operations and assets
• Estimating the likelihood that such threats will materialize based on historical information and judgment of knowledgeable individuals
• Identifying and ranking the value, sensitivity, and criticality of the operations and assets that could be affected should a threat materialize in order to determine which operations and assets are the most important
• Estimating for the most critical and sensitive assets and operations, the potential losses or damage that could occur if a threat materializes, including recovery costs
• Identifying cost-effective actions to mitigate or reduce the risk. These actions can include implementing new organizational policies and procedures as well as technical or physical controls
• Documenting the results and developing an action plan