Risk Assessment

The Risk Management process requires that management identify, assess, measure, mitigate, and monitor those risks that may be present due to the type of services offered and the systems employed to deliver those services. Generally, scoped out risk assessments are asset focused and qualitative in nature. In a qualitative approach, we will assign a rating to each risk and countermeasure that is derived from a consensus opinion of E3 and the organization being tested. We will develop scenarios to lay out the possible threats, their potential likelihood, and impact. We then factor in compensating and mitigating controls to determine the residual risk the organization may have in regards to its critical assets.