Increasing the Frequency of Risk Assessments
Time to ramp up your risk assessment!
When it comes to IT risk assessment, frequency is just as important as the actual assessment. While HIPAA and other compliance mandates only require annual assessments, some experts say this is not enough for most organizations.
Director of risk and advisory services for Neohapsis, Gary Alterson, suggests moving to at least a quarterly assessment schedule. “Given the rapidly changing threat environment and how fast IT moves, I recommend that risk assessments be refreshed and reviewed at least quarterly, if not monthly,”
In order to be able to keep up with the increase in assessments, organizations need to rethink their approach to the process.
“A better approach is to make risk assessments more of a life cycle and process within the organization. Perform assessments continuously throughout the year,” says Jim Mapes, chief security officer at BestIT.
Organizations need to build time and resources into the IT lifecycle. Here are some tips to starting:
- Track. Start a daily tracking of risk factors.
- Prioritize. Focus on what matters most, the most risk-adverse data.
- Mitigate. Don’t just assess risk, work towards mitigating it throughout the IT lifecycle.
Original article by Ericka Chickowski.
Read the full story here.
Leave a comment
Another awareness poster for YOUR customers (and users). Now that we have our own em Read more
Winter weather does its part to help catch a robber… An article review. This time of Read more
The seven best trend articles in 2019 . . . For ISOs of small financial institutions. Read more
A new exploit involving Apple’s FaceTime is a reminder that our gadgets can be turned Read more