I will conduct iso cybersecurity risk assessment

Basic package is to understand organization's structure, operations, data design, needs and gather information to develop scope of cybersecurity risk assessment e.g. whether Baseline on foundational or full cybersecurity risk assessment is required. Basic package will not have any report.

Cybersecurity risk assessment determines risk based on threat, vulnerability and impact and the purposes are to identify risk, assess risk based and prioritize risk.

1) Risk assessment is at the heart of the ISO compliance. It identifies, assesses and establishes the existence of specific security controls. 2) Risk audit tests those specific security controls, is more complex and may focus on specific goals of an organization e.g. ISO certification etc.

1) Develop Scope of Risk Assessment(meeting via video link with stakeholders to understand organization’s structure, operations, data design, needs and gather information). 2) Execute Risk Assessment Exercise(define security controls, exercise risk assessment and assess risk impact on organization).

1) Relevant international standards (ISO or NIST) controls requirements. 2) Assessor observation on organization’s existing security posture. 3) Assessor recommendations for implementing security controls. 4) Risk impact on organization’s business. 5) Risk rating (low to critical etc.).