Risk Assessment Archives - Audit and Risk

Data Classification – How to get it right

By admin|2024-07-22T13:41:51+01:00July 22nd, 2024|Information Security, ISO27001 Certification, ISO27001 Implementation, policies and procedures, Risk Assessment|

Data Classification: How to get it right Not all business data is created equal. Some information is more valuable—and more sensitive—than others. This is where data classification becomes important. It helps separate the low risk information from the highly sensitive and confidential. What is Data Classification? Data classification is the process of categorising business information based on its level of sensitivity and the impact to the organisation should that data be disclosed, altered, or destroyed without authorisation. It's about understanding what data you have, where it [...]

ISO 27001 – Risk Assessment Requirements

By admin|2023-11-23T12:18:47+00:00November 23rd, 2023|Risk Assessment|

ISO27001 - Risk Assessment Requirements Managing Risk: A Core Element of ISO 27001 Certification For organisations seeking ISO 27001 certification, implementing a comprehensive risk management program is essential for obtaining the certification. ISO 27001 requires a formal risk assessment policy and procedure to be in place. This can be a bit intimidating when you haven't done any formal risk management practices before. But remember that you are managing risk as a business owner or department head all the time. You may not see it that way [...]