Cyber Risk Assessment & Management

Identification of systems & relevant assets
Identification of potential security threat actors, sources, methods & impact
Audit of existing systems, processes & policies using frameworks & guidance such as ISO27001 / 27002, ISO27005, ISO31000, NIST CSF, Cyber Essentials, CIS 20 & OWASP etc
Co-ordination of security testing to identify system vulnerabilities
Management of remediation & mitigation
Identification of residual risk with acceptance, transfer