IT Risk Management

Who is it recommended to?

To company CEOs
To IT managers
To internal audit managers

What do we do?

Based on the chosen framework the threats are assessed
Controls are assessed
Residual risk is determined
The implementation plan is developed and its implementation is supported

Why is is useful?

To achieve business goals it is essential that the managers be aware of the threatening (or helping) risks as well as the opportunities to treat them.

Based on the selected risk management framework (for instance ISO 31000, COSO, COBIT 5) we explore the inherent risks, assess the relevant controls that make the risks, which should be dealt with, become visible.

We facilitate the development and implementation of action plans to reduce the identified risks. There is no 100 % security, effective protection proportional to the risk is targeted.

Your personal contact:

Ferenc Smohay

Partner