Manage Risk the ISF Way

Information risk assessments enable organisations to select controls or other treatment options that are commensurate with risk in order to reduce the frequency and impact of information security incidents.

ISF materials, including the SOGP, have been developed to support the risk assessment process of identifying business impacts, assessing key threats and vulnerabilities, in addition to treating information risks. These materials complement organisational approaches to information risk assessment and, when used in conjunction with ISF Risk methodologies such as IRAM2 or QIRA, enables an organisation to keep information risk within acceptable limits.

Join Benoit Heynderickx, Principal Analyst and Hui Shan, Senior Analyst, at the ISF, where they considered all these different materials, and present how they can be combined and used to effectively manage risk.