Risk Management Services

Strasan provide a framework whereby the business can assess risk exposures faced by their key business enablers and implement controls to manage these risk exposures within acceptable limits. Risks to assets are identified through consideration of the potential threats, whether they be deliberate, accidental, or environmental, to the:

• Confidentiality of systems and information
• Integrity of systems and information stores
• Availability of systems and the information that they contain

Risk Assessments provide a framework whereby owners and operators of key business units can assess risk exposures faced by their key business enablers and implement security controls to manage these risk exposures within acceptable limits.

Strasan provides a methodology based on AS/NZS 4360 for comprehensively and systematically managing risks in an organisation or agency, including:

1. Communicate and consult

Communicate and consult with internal and external stakeholders as appropriate at each stage of the risk management process and concerning the process as a whole.

2. Establish the context

Establish the external, internal and risk management context in which the rest of the process will take place. Criteria against which risk will be evaluated, established and defined.

3. Identify risks

Identify where, when, why and how events could prevent, degrade, delay or enhance the achievement of the objectives.

4. Analyse risks

Identify and evaluate existing controls. Determine impact and likelihood and hence the level of risk. This analysis should consider the range of potential consequences and how these could occur.

5. Evaluate risks

Compare estimated levels of risk against the pre-established criteria and consider the balance between potential benefits and adverse outcomes. This enables decisions to be made about the extent and nature of treatments required and about priorities.

The above processes can be applied to existing and/or developing (inc. projects) systems, processes, and procedures. Strasan has performed risk assessment for a number of organisations’ processes, systems and environments