When assessing IT security of the providers of an organization, we may find ourselves in bothersome tasks like having to create custom questionnaires and review the answers sent by them. Some providers offer cybersecurity risk questionnaires. This is a non-exhaustive…
This post summarizes certifications related to IT risk management that are aimed for professionals, and not certifications. List of IT Risk Management Certifications for Professionals List of IT Risk Management Certifications for Professionals: CRISC Certification in Risk Information Systems Control…
This post features some general-purpose risk management frameworks. For risk management frameworks specific for IT, please check this post. List of Risk Management Frameworks Risk management frameworks featured on this post: ISO 31000 ISO 31000 is a framework for risk…
Business continuity is concerned with maintaining critical operations during any interruption in a service. It should make focus on incidents that are not frequent but may cause a big impact on the organization, such as a disaster. Disaster recovery focuses…
This post summarizes some relevant IT risk analysis and management frameworks or methodologies. Please do not confuse them with risk analysis methodologies. List IT of Risk Management frameworks List of IT risk analysis frameworks: ISO/IEC 27005 The title of ISO/IEC…
An information security rating is an objective, data-driven, quantifiable measurement of an organization’s overall information security performance. It is often referred as cybersecurity rating. This post summarizes information security rating agencies that can assess organizations. List of Information Security Ratings for Organizations…
This post tries to make an overview about how to perform a risk assessment of information technology (IT) assets. Steps to perform an IT risk assessment The summary of steps to be done are: Define scope Select a risk assessment…
This post summarizes some certifications and certificates for IT security professionals. IT security certificates and certifications are grouped on this post following these categories: General IT Security General IT Security certifications and certificates: Probably the most valued of this list…
This post summarizes some relevant risk analysis methodologies. Do not confuse them with the IT risk management frameworks. List of Risk Analysis Methodologies List of IT risk analysis methodologies: Quantitative Qualitative Semi-quantitative Asset-based Vulnerability-based External References
Magerit, sometimes written as MAGERIT, is a methodology to manage information technology (IT) risk that it is issued and managed by institutions related to the Goverment of Spain. Because of this, this IT risk analysis methodology is recommended to be…