How to approach an information-security risk assessment

How to approach an information-security risk assessment

Start by understanding the organization, its scope and critical business processes.

Identify information assets and the systems, people and suppliers that support them.

Identify relevant threats and vulnerabilities and assess likelihood and impact.

Prioritize risks using defined criteria and assign owners.

Select treatment options and map them to appropriate controls, then monitor progress.

How JULA can help

JULA can help translate these principles into an operational ISMS through assessment, documentation, risk management, control implementation, training and audit readiness.