Controlling Technical and Business Risk
Risk Management is the process of planning, organizing, leading and controlling the activities of an organization in order to minimize the effects of risk on an organization's capital and earnings by assessing external and internal vulnerabilities. To determine your Business Risk Posture, ETSec conducts a thorough Business Risk Assessment that ultimately ensures that controls and expenditures are proportional to the security risks in your organization.
ETposture™ security assessments provide a "snapshot" of the organization's security posture - its strengths, as well as any gaps that may indicate vulnerabilities. Unlike other security companies that focus solely on technical risks, ETSec also assesses any business risks that could result in an increased potential of security breaches. Based on deep understanding of - and expertise in - enterprise security, ETSec believes that there is a strong causal relationship between business and technical risks. That is the reason that ETSec places such a strong emphasis on conducting assessments of both business and technical risks within an organization.
The ETposture Approach
During the business and technical risk assessments, ETSec's team of dedicated security professionals use standards-based review process, sophisticated analysis tools, and the ETposture methodology to probe deeply into business and technical vulnerabilities. Thorough assessments of business and technology assets are conducted, and risks associated with those assets are identified through careful analysis of gaps using prevailing best practices. To complete the process and ensure those risks are fully understood, ETSec will provide executive briefings concerning assessment findings, and provide candid, practical, understandable recommendations in order to help clients move further ahead of the security curve.
An ETposture assessment involves the following phases: