Many organizations are considering the implementation of an Information Security Management System (ISMS) based upon ISO 27001. One of the key components of an ISMS, or in fact any solid information securityprogram, is a fully documented risk management approach. Still, many organizations struggle with putting this critical component in place.

As a first step in creating a risk management process, Accuvant has developed the Risk Management Process Review. ISO 27001 has prescribed an approach based upon BS7799-Part 3: Guidelines for Information
Security Risk Management. This standard offers a holistic model for risk management including:

• Risk Assessment Actions
• Risk Treatment Options
• Ongoing Risk Management Activities 

Using a documentation review supported by targeted interviews, Accuvant will develop a roadmap for risk management process that conforms to the expectations of BS7799-Part 3 and ISO 27001.

Accuvant helps clients define and adopt ongoing, manageable strategies to achieve and sustain compliance by transforming tasks from costly one-time projects into repeatable, integrated business processes. Our approach creates the template for risk management that is effective, efficient and manageable.

If you would like more information about Accuvant's risk management solutions, please email info@accuvant.com or contact our sales department at 1-800-574-0896.