Our Process
Our TRA is easily adaptable to any environment and can be tailored to meet your unique objectives. There are usually four phases to the process:
Phase I
- The environment and scope are defined and assets are identified, valued and assigned a sensitivity rating.
Phase II
- Identifies threats, assigns a classification to each one, ascertains the likelihood of a threat's occurrence, and defines the consequences of an occurrence.
Phase III
- Examines the threats and their exposures based on information derived from the previous steps.
Phase IV
- Recommendations are prepared. The final report is an overall assessment of the evaluated safeguards and includes written recommendations to provide the basis for an effective risk mitigation strategy.
Our Threat Risk Assessment (TRA) places all Information Technology assets into risk categories, examines all potential "threats" to each of them, and then identifies and corrects the most immediate and obvious security concerns. After correcting immediate threats, other security measures are discussed to address additional continuity and disaster recovery concerns. This approach tackles risk mitigation strategies in a well-controlled and far more economical way than do "informal," sometimes rushed and haphazard, remedial responses.
Call Us at (416)644-5085
Email:
kkinsella@thechaosgroup.ca