Information security risk assessment
ISO 27001 and NIS2 both start from a risk assessment. We run it with your team in one session and deliver the register and the plan.
What you get
One organisation, up to 100 staff, one session.
- 01A risk method with criteria for likelihood and impact
- 02A three-hour session with your team
- 03A risk register with an owner for each risk
- 04A treatment plan with actions, owners and dates
- 05A summary for management
How it runs
- 01
Order and intake
Order online. Answer the intake questions. Ten minutes.
- 02
Pick your date
A start date at least three working days ahead, or a session date for the ones with a live session.
- 03
A specialist does the work
From a fixed template for that product. One round of changes is included.
- 04
I review and release
Nothing reaches your portal unreviewed. You get a notice when it is there.
Order this service
Pick a start date. Pay online. Receive it in your portal. One round of changes included.
Asked before ordering
Who does the work?
A vetted specialist working with our fixed method and templates. Every result is checked against the method's checklist before it reaches your portal.
What if we need changes?
One round of changes is included. Anything outside the scope on this page is quoted before it is done.
When can you start?
From three working days after you order, on the working day you choose in the portal.
Is this legal advice?
No. We are compliance specialists, not lawyers. We describe what a standard or regulation asks and how to organise it; decisions stay with your organisation. Where a contract or a legal position is at stake, involve your lawyer.