RISK ASSESSMENT
Preparation
Understanding
Understanding
- Agree objectives, scope and parameters
- Select assessment team
- Develop assessment project plan
Understanding
Understanding
Understanding
- Information Gathering (Internal and external)
- Review information and identify gaps and additional information requirements
Assessment
Understanding
Assessment
- Review methodology (Assessment structure, Grading systems, and Threat categorization)
- Review drafts, identify gaps and anomalies
- Follow up information gathering and consultation
Reporting
Follow-up 1.
Assessment
- Draft risk report
- Client review/risk workshop
- Publish final report
- Determine next step
Follow-up 1.
Follow-up 1.
Follow-up 1.
- Draft action plan with client
- Assess progress
- Report on progress
Follow-up 2.
Follow-up 1.
Follow-up 1.
- Assess progress
- Report on progress