How We Assess Risk & Compliance
Most institutions are now required to conduct formal risk assessments of their IT and online security systems to ensure compliance with regulations such as: ISO 27001, PCI, Red Flag Identity Theft, NCUA, FFIEC, GLBA, BSA, HIPAA, NERC and Physical Security.
RiskWatch software allows the user to evaluate their risks and produces reports and graphs specifically detailing compliance within these regulations, or showing where controls are needed.
As part of the assessment, RiskWatch also creates a full compliance assessment, and the process takes less than 80% of the time of doing these manually. The simplified data collection, web-based surveys and automated report generation not
only create a high level management report with audit trails, but also support the security
budget by recommending actual controls by Return On Investment.
Physical security assessments required by the Joint Commission, mandate a full physical security risk assessments and many military and intelligence organizations also use full physical risk assessments.
Risk assessment data can be used to populate BIAs, disaster recovery, COOP and business
continuity plans and create a true baseline for total security.
Consultant support is available in getting started, report reviews or we can do the assessments, policies and plans for you.
CREATE A SECURITY FOUNDATION FOR YOUR ORGANIZATION WITH RISKWATCH