Risk Assessment

We have more than 15 years of experience helping our clients carry out risk assessments based on international standards. We have placed particular emphasis on ISO/IEC 27001, ISO/IEC 27002, and ISO 31000, but we have also helped clients carry out risk assessments with respect to other standards such as NIST and COBIT.

Examples of common risk assessments include the following:

• Risk assessment with respect to the operational security of a company or institution
• Risk assessment with respect to organizational structure
• Risk assessment of the IT environment
• Risk assessment of key processes and services
• Risk assessment related to project management or an individual project
• Risk assessment of the working environment
• Risk assessment of the server room
• Risk assessment of the work environment

Risk assessment is a cornerstone of operational security and is part of best practices in information security.