Risk Assessment

Learn how to analyze, rank, and prioritize risk to enable your organization to better mitigate and enhance your risk management program.

A Thorough Audit Makes a Difference
A Typical Journey with Risk
Auditor Insight: The Top 3 Issues with Your Risk Assessment [WEBINAR]
Consider the Potential for Fraud in Assessing Risks
How to Identify, Analyze, and Manage Risks to Objectives
Identify and Assess Changes That Could Impact Internal Controls
PCI Requirement 12.2 – Implement a Risk Assessment Process
SOC 2 Academy - How to Manage Risks
SOC 2 Academy - What Types of Risks Does Your Organization Face?
SOC 2 Academy: Assessing Changes Within Your Organization
SOC 2 Academy: Assessing the Significance of Risk
SOC 2 Academy: How Fraud Can Impact Risk
SOC 2 Academy: Mitigating Risks that Lead to Business Disruption
SOC 2 Academy: Risks from Business Partners
SOC 2 Academy: Using a Risk Assessment
SOC 2 Academy: Who Should Make Updates to Your Risk Assessment?
Specify Objectives for Risk Assessments
The Assessment of Fraud for SOC 2

Risk Treatment

Learn how to develop a risk treatment plan that works. Documenting existing controls and planning for future controls to mitigate risk is the best next step.

4 Ways to Treat Risk
Benefits of Risk Management
Communicating Risk Assessment Results
Partner With Risk Assessment Experts
Risk Management Strategy
Risk Treatment for ISO 27001
Three Types of Controls
Using Your Risk Assessment Results
Why Risk Assessment?

Asset Inventory

Learn how to identify the assets to protect when assessing risk. These assets include systems, data, people, locations, and processes.

Business Environment
Cloud Services Are Assets with Risk
How to Define Your Scope
Identify Your Assets
NIST CSF Identify Function
Step One for Risk Assessment
Types of Assets to Consider
What is Scoping

Risk Assessment Standards

Learn about industry standard methodologies for risk assessment, such as ISO 27005, NIST 800-30, and OCTAVE.

3 Risk Assessment Methodologies
A Thorough Audit Makes a Difference
HIPAA Risk Analysis
HIPAA Safe Harbor
HIPAA and Risk Analysis
HITRUST and Risk Assessment
ISO 27001 Clause 6.1.1
ISO 27001 Clause 6.1.2
ISO 27001 Risk Assessment Documentation
Industry Standards for Risk Assessment
Introduction to NIST SP 800-30
Introduction to NIST SP 800-39
PCI DSS and Risk Assessment
Understanding NIST SP 800-39
What Does An Auditor Want In Our Risk Assessment

Vulnerability and Threats

Learn how to navigate the unknown. Considering potential threats could be the difference in being ready for the next attack.

A Typical Journey with Risk
Cyber Threat Intelligence
Defining Risk, Threat and Vulnerability
Does Zero Risk Exist
Monitoring Changing Risk
Overview of Environmental Risk
Personnel Risk
Real-world Risk Assessment
Third Parties are Threats Too
What Threats Should Be Considered
What are Threats

Likelihood and Impact

Learn why all risks are not the same. Determining likelihood and impact are important for quantifying risk.

Defining Likelihood and Impact
Determining Impact to Your Assets
Don't Discount Likelihood
Evaluating Likelihood and Impact
Ranking Risk
Thinking About Likelihood and Impact

Partner with us

Our specialists are ready to assist you with completing your risk assessment. Connect with a risk assessment expert to get the conversation started!

Connect with a Live Expert