Risk Mitigations Mitigations are those actions that reduce either the impact or the likelihood of that risk coming to fruition. You can’t completely remove risk from your risk assessment, but you can mitigate it to a low enough risk that it is accepted by the companies executives. Your risk management […]
Risk Formulas Once a risk is identified it should be scored and prioritized. The most basic risk formula is Impact * Likelihood. Calculations can either be an estimate for a score of 1 – 5 on both impact and probability for a maximum score of 25 or a more complex […]
What is a Risk Assessment? Conducting a risk assessment is no frivolous task and encompasses your organization, business mission functions, and Information Technology. There are many frameworks for conducting Risk Assessments; NIST SP 800-30 rev 1 is what we use for assessing risk in organizations. A Risk Assessment is a […]
What are Cybersecurity Risks? If you’ve been reading our articles you will have read about vulnerabilities; don’t worry our series on Risk Assessments aren’t duplicates of our vulnerability article, rather they are a whole different view of cybersecurity. Vulnerabilities deal with the technological entry points for hackers; Risks are higher […]