Nos métiers

The reference for information security risk management is ISO 27005. It is a point-by-point response to all the requirements of ISO 27001 for risk assessment. There is a risk of information security when there is a common source of threat, threat, vulnerability and impact.

To help you achieve your goals on the basis of rational decisions, we support you in a risk assessment process according to the following steps:

• Identification and classification of information assets;
• Threat identification;
• Identification of existing security measures;
• Identification of vulnerabilities;
• Identification of consequences of threat scenarios;
• Assessment of the consequences of threat scenarios;
• Estimation of risk levels;
• Assessment and treatment of risks.