Service · It comes round every year
Risk assessment
The annual risk assessment of your security system, with MAGERIT and PILAR when it is for the ENS.
Get in touch about this serviceWhat stays
Delivered as a report: assets, threats, current and residual risk, and the treatment plan.
What it includes
- Asset inventory and valuation
- Threats and the safeguards you already have
- Current and residual risk
- Treatment plan, for you to approve
When
Every year
Example: January
An example of the month it fits. The real calendar is agreed with you.
How it is delivered
Step 1
Fixed-scope engagement
We agree scope, deliverable and calendar in a written proposal.
Step 2
Work with your team
We work with your owners and, if you use the platform, inside it, with the access you grant us.
Step 3
You receive the report
We hand over the report and go through it with you.
Step 4
Next time starts here
What stays is the starting point for the next review, not a document that gets lost.
Goes well with
- Service · Once
Gap analysis against a framework
We measure where you stand against ISO 27001, the ENS or DORA and what you still need to comply.
- Service · Every year
Internal audit
The annual internal audit of your security system, by someone who did not implement it.
Shall we talk about this service?
Tell us where you stand and we will send you a fixed-scope proposal.