Cyber Risk Assessment
- A cyber security risk assessment is important to identify, analyse and evaluate risks within the organization It helps to ensure that the cyber security controls you choose are appropriate to the risks your organisation faces.
- Typically risk assessment incorporates identifying various information assets that could be affected by an attack ( hardware, systems, laptops, customer data, intellectual property, etc.).
- After the assessment the organization would have to choose the appropriate set of controls necessary to treat the identified risks.
- The international standard ISO/IEC 27001:2013 (ISO 27001) provides the specifications for a best-practice ISMS (information security management system) – a risk-based approach to information security risk management that addresses people, processes and technology.
- CG-Securities professionals will;
- Identifying the assets that require protection.
- Determine with stakeholders the risk threshold and level of acceptance.
- Identifying threats vulnerability .
- Determining the business impacts of risks.