WHITEPAPERS
EDUCATE YOURSELF AND STAY UP TO DATE WITH OUR RISK ASSESSMENT WHITE PAPERS.
Whitepaper No.1: Software tool for efficient risk assessment
The paper presents advantages of using a Risk Assessment Tool for assessment of risks that information assets are exposed to. The main purpose of the paper is to answer the question: What makes a risk assessment software really useful for organization?
In practice it turns out that the risk assessment tool is useful if it can be adapted to organization risk management process. This means that access rights can be configured on the basis of the user role in the process of risk assessment, that the risk matrix can be adapted and the relevant threats and vulnerabilities can be chosen from the available database. The experiences show that qualitative estimation of input data for risk estimation is more useful and better approximates the real situation than the qualitative one.
Whitepaper No.2: How to ensure appropriate level of information security?
With growing complexity of information system the organization is faced with uncertainty whether the stored information receives an appropriate protection in line with business needs, contractual and regulatory obligations.
A systematic risks assessment is most advisably in such a case, because it reveals the most critical weaknesses in organizational procedures and technical security mechanisms implemented to protect information. The benefit of risk assessment is that the results can be used to justify the costs and prioritization of investments to achieve a better level of information security and compliance with legislation.
