Transcription  

Many clients ask us, “How long will it take for us to perform our risk assessment?” the answer is, it depends. It really depends on the complexity of your organization. More complex companies may have a broader attack surface to consider and different layers of risk throughout their environment. Some organizations are able to finish their risk assessment within one working day, while others decide to make their risk review continuous, and have monthly meetings with their risk committee. It’s all about finding what works for you in your organization, and how you will get the most value from your risk assessment.