Information Risk Assessment Methodology 2 (IRAM2)

The next generation in assessing information risk.

Part of the ISF Aligned Tools Suite, IRAM2 applies a simple, practical, yet rigorous approach to risk assessments, enabling organisations to speak a common language with various key stakeholders.

The methodology is set out in six phases; each detailing the steps and key activities required to achieve the phase objectives, as well as identifying the key information risk factors and outputs.

IRAM2 is supported by four IRAM2 Assistants, each accompanied by a practitioner guide, that help automate one or more phases of the methodology. Additionally, IRAM2 is supported by the IRAM2 WebApp – an online assessment tool for performing information risk assessments across an organisation.