Take the ISO 27001 course exam and get the EU GDPR course exam for free
LIMITED-TIME OFFER – VALID UNTIL SEPTEMBER 30, 2021

Expert Advice Community

Guest

Creating risks list

  Quote
Guest
Guest user Created:   Sep 13, 2019 Last commented:   Sep 26, 2019

Creating risks list

Oye tengo una gran duda con unos templates que compre con ustedes para Risk Assessment, en los videos no muestran como crear la lista de Riesgos. Solo indica que primero hay que identificar los Activos, a través de las amenazas y vulnerabilidades pero no veo ningún template que muestre el resultado final después de haber identificado los Riesgos, estoy confundido. Me puede ayudar?

(Hey, I have a big question with some templates that I bought with you for Risk Assessment, in the videos they don't show how to create the list of Risks. It only indicates that the Assets must first be identified, through threats and vulnerabilities but I don't see any template that shows the final result after having identified the Risks, I am confused. Can you help me?)

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal Sep 13, 2019

Please note that in the asset-threat-vulnerability approach used in the template there is not a phrase or statement for the risk. The assets+threats+vulnerabilities are the risks, and there is nothing else needed to identify the risks.

From that you only have to evaluate the level of impact and likelihood to calculate the risk value.

For further information, please read:

Quote
0 1
Guest
Jaime Vazquez Sep 26, 2019

Thak you Rhand Leal,  now,

How can I cross or related  the assets identified in the SOA with the Risk Treatment Plan?  The order in which I should write each activity in the plan is the order in which they are in the SOA?  Should I  just write the asset name or rather the activity name to be done to decrease the risk ?  and specify what, who, when, how, timing, status, etc.  

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Sep 13, 2019

Sep 26, 2019