Risk Assessment
 

Risk assessment is an important part of maintaining a secure and effective cybersecurity program. It involves identifying potential threats and vulnerabilities, evaluating the likelihood and potential organizational loss. A roadmap will then be scored to accept, mitigate, transfer, avoid, reduce, share, or eliminate the risks. This process can help organizations to prevent cyber-attacks and protect sensitive data and systems. It is important to regularly review and update the risk assessment (at least annually) to ensure that the controls in place are still effective and to identify any new risks that may have emerged.

 

Securadin’s objectives for Risk Assessment include the following:

         

• Ensure the protection of information assets

• Ensure compliance with regulatory requirements

• Develop a prioritized, actionable plan for risk mitigation

• Create a repeatable methodology based on an industry standard

• Identify cybersecurity risks in accordance with multiple standards for risk assessment

 

The Risk Assessment is based on the following regulations and standards:

​

• ISO/IEC 27001:2013

• NIST SP 800-30 Risk Management Guide

• NIST SP 800-37 Applying the Risk Management Framework

• NIST SP 800-53 Security and Privacy Controls for Federal Information Systems