Threat and Vulnerability Management
To understand the value-add of investments made into an effective Enterprise Risk Management program´s processes and
resources, each business needs to assess and determine the threat exposure that they face or should anticipate, given known industry
breach events, internal security/privacy incidents or other events affecting their business policies and reliable operations.
Businesses need to discover and assess the types of potential risks that currently exist and that could affect
their business assets, particulary sensitive business/personal data.
The types of risks that affect organizations typically fall into the following gategories:
- Security ... of unauthorized access, alteration or use of information
- Operations ... of inaccessible business applications/processes/data
- Performance ... of delayed access and response to business processes/data
- IT ... liability to acheive objectives because of failures of enabling technology
- Reputation ... of damage to reputation caused by company/partner actions
- Legal ... of violating compliance, regulatory or security policy requirements
Once risks are determined, businesses need to quantify the business impacts of the currently
known and potential risks, relative to the "risk appetite" deemed appropriate for their business, to best determine how
to tolerate and manage their vulnerabilities, business risks and consequences. The business consequences for business risks could result in:
- Civil and Criminal Violations ... for senior management, employees and business third parties
- Business Credibility Damage ... due to current business clients and customers affected
- Severe Business Losses ... due to business disruptions to correct and resolve breaches
- Costly Fees and Penalties ... from hundreds to millions of dollars depending on violation
Vosity´s Consultants can perform an initial and continuous threat assessment
and vulnerability management program that address your information systems infrastructure and web application vulnerabilities.
The vulnerability management program will incorporate the establishment of policies, vulnerability scanning framework/tools and
the appropriate people/process/technology controls and risk remediation solutions required for your business.
|
|
