Challenges

  • Risks described with generic ratings such as "high" and "medium", without showing their potential business impact

Scope

  • Risk management framework
  • risk assessment
  • key risk indicators (KRIs)
  • project risk assessment

Deliverables

  • Risk register
  • leadership risk report
  • treatment plan

Target clients

Banks, government entities and large companies

Frameworks, standards & technologies

ISO/IEC 27005 · NIST CSF

Value

Security decisions based on risk impact, communicated in clear, shared language with the board.

Success indicators (set with the client)

Share of high risks with treatment plans · share of indicators within accepted thresholds

Starting the engagement

Scope, deliverables, requirements and success indicators are agreed before delivery. Include the service name and code in your enquiry.

Client requirements

The catalogue specifies no additional prerequisites for this service. Access, stakeholders and the agreed scope are confirmed before delivery.