Skip to content

Risk Assessment

Your information security program needs a strong foundation, and a thorough risk assessment is where it starts. Boost Risk Assessment pairs you with an experienced consultant who guides the development and upkeep of your information security and asset-based risk assessments. CoNetrix Security has developed information security programs since 2001, and our experts hold CISSP, CRISC, CISM, and CISA certifications.

Boost-RiskAssessment

Expert Guidance, Exam-Ready Documentation

Your consultant facilitates the development of your risk assessments, from identifying reasonably foreseeable threats to documenting risk management plans. Your process managers can give input on their own areas, or the work can stay centralized. After the initial assessment, your consultant reviews risk levels and control effectiveness and makes updates where needed.

Every aspect of your risk assessment is documented in Tandem and exports to reports for your Board, committee, auditors, and regulators. Working through the assessment with your consultant gives your team the confidence you need to answer questions from auditors and examiners.

Service Features

Boost Risk Assessment covers your information security risk assessment and asset-based risk assessments, with optional online and mobile banking risk assessments for financial institutions. Engagements run as a six-month project with optional annual ongoing support, and consulting is available onsite or remotely. Your consultant works with you in Tandem Risk Assessment and provides training on the software. Assessments follow federal guidance and draw from industry best practices, such as GLBA, HIPAA, the Interagency Guidelines Establishing Information Security Standards, and the most recent FFIEC IT Examination Handbook. Risk Assessment is also part of VISO Consulting and pairs well with Information Security Policies development.

Request More Information Back to Boost Consulting Services

  • Information security risk assessment using a threat-based model

  • Asset-based risk assessments for specific assets, products, or vendors

  • Internal and external threats to sensitive information and information systems

  • Inherent risk, mitigating controls, residual risk, and risk management plans

  • Updates to the threat analysis questionnaire, data classifications, customer information locations, and crime and natural disaster statistics for your locations

  • Threats to information assets incorporated into IT policies, with a compliance review of policies and procedures

  • Online and mobile banking risk assessments for financial institutions

  • Revision log in Tandem tracking threat and risk level changes

  • Board summary of the scope and depth of your risk assessments