Security Risk Assessment

Description

Security Risk Assessment with Security Audit

Analysis of resource – risk identification – risk mitigation measures – risk analysis Report

Breakdown:

• Plan the engagement – 1 day
• Understand the information resource to be analyzed – 5 days
• Using the bottom-up approach – conduct the analysis and identify risks – 15 days
• Validate with resource owner – 2-3 days
• Document in the Risk Report – 6 days
• Prepare the implementation plan (on demand)
• RESULT: Risk Analysis Report including the following:

• Understanding of the context
• Understanding of the information resource
• Scope
• Risk Register
• Risk Treatment measures