I will do iso 27001 cyber security risk assessment and build your risk register
ISO 27001 Lead Auditor, GCC GRC Consultant
About this Gig
An ISO 27001-aligned information security risk assessment with a ready risk register, treatment plan and a short management summary.
WHAT'S INCLUDED
- Risk methodology (likelihood, impact, scoring)
- Asset and threat identification
- Risk register in Excel
- Risk treatment plan mapped to Annex A
- Executive summary slides (Premium)
HOW IT WORKS
- Send your scope and asset list
- I run the assessment with your inputs
- You get the register, treatment plan and a walkthrough
WHY ME
ISO 27001 Lead Auditor (IRCA), CISM, MSc Information Security. 7+ years of GRC consulting across GCC and Europe. 5.0 rating, 100% on-time.
CONFIDENTIAL: NDA available.
FAQ
Do you use a specific methodology?
I use an ISO 27005-style approach and can adapt to yours.
Can you assess our cloud environment?
Yes, at risk and governance level. I don't do technical testing.
What do I need to provide?
Your scope and asset list. I provide a template for the asset list.
Do you do penetration testing?
No. This is a governance assessment, not technical testing.
Is the register editable?
Yes. It is delivered in Excel.
