Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
Risk interviews and workshops
I have been reading the article on "risk assessment tips for smaller companies", again a very good article - very informative. In the article it refers to the risk assessment interview, do you have any examples of these interviews or scripts that could be used? Just to ensure we are asking the right questions and probing for the right information? -
Impact and likelihood values
i have a query. we have putforth threat and vulnerbaility values in risk assessment. we have values before mitigation and after mitigation. which value remains constant after mitigation? isit threat value or impact value -
Application risk assessment
Would you please help me to understand about application risk assessment? -
System access by the security guard
Just need one clarifications, can the system access be given to the security guards? -
Structure for a project plan
Would you please guide me how to make a structure and logical project plan for implementing ISO 27001:2013 ? -
Existing controls decrease the level of risk
I did the risk assessment and go the risk level for every asset. Then the current controls maturity were evaluated accordingly to the CMM levels. The risk scale is from 0 to 4 and the acceptance level is below 2. The controls recude the current risk to below 2 level, so there is not need for a risk treatment plan. This is correct? or I'm missing something? -
Guide for Indicators and risk assessment
Hello, my question is if ISO 27001 has a indicator guide with formula for assessment every domain or control in a organization ? -
Estimating the price for risk assessment
I am facing a difficulty in estimating the price for risk assessment to a client with 600 employees divided in 3 branches. They are primarily interested in checking the roles, responsibilities of their IT/security department, the processes and performing the asset based risk assessment. What are the criteria based on which you charge the clients? What should be the average price per user, price per computer, or how do you do it? -
Business Continuity or Disaster Recovery?
Which out of Business Continuity or Disaster Recovery is an absolute must have? -
Certification that better suites a Health Maintenance Organization
I will like to know the certification that better suites a Health Maintenance Organization (health insurance company)