Digitaliso D.R.A.
Digital Risk Assessment
Digitaliso D.R.A. supports the structured and ongoing management of information security risks, integrating assessment, controls and a treatment plan within the Digitaliso ecosystem.
Un unico processo
01
Threats
02
Processes and assets
03
NIS 2 checks
Assessment → Treatment → Monitoring
the problem
The problem isn’t carrying out a risk assessment just once. It’s keeping it up to date over time.
When assets, threats, controls, assessments and treatment plans are scattered across Excel spreadsheets, documents and folders, keeping the risk assessment up to date becomes a complex task.
D.R.A. transforms this information into a structured process that can be updated and tracked over time.
Informazioni frammentate
Excel
Documents
Folders
↓
Digitaliso D.R.A.
A single, structured process
Assessment
Treatment
Monitoring
THE D.R.A METODOLOGY.
Three strands of assessment, in a single process
01
Threaths
Identify events that could compromise information security.
Assess the likelihood of the threat and determine the pure risk posed by the threat.
THREATH ASSESSMENT
Plausibility × Consequences
02
Processes and Assets
Identify the information processed in the processes and the key assets to be protected.
IMPACT ASSESSMENT
Assess the impact on Primary Assets according to the three dimensions of information security.
C
Confidentiality
I
Integrity
A
Availability
03
Information security control
Assess the measures taken to protect information and reduce risk.
from monitoring to treatment
Assess the implementation of controls and determine the residual vulnerability. The result informs the Risk Treatment Plan and the monitoring of the necessary actions.
Application → Residual Vulnerability
not a static snapshot, but an ongoing monitoring
A Risk Assessment that remains relevant
Risk changes as the organisation changes. New assets, changes to processes, new threats or controls put in place may alter the outcome of the assessment over time.
.D.R.A. enables you to keep a record of assessments, plan and monitor treatment actions, manage deadlines, notifications and reminders, and use indicators to track the progress of the process.
Risk assessment is not a static snapshot, but rather a process that can be updated and tracked over time.
The cycle continues over time
01
Assessment
Assets, threats and controls determine the outcome of the assessment.
02
Information Security Risk Treatment Plan
These assessments inform the actions required to manage the risk.
03
Monitoring
Deadlines, notifications, reminders and indicators help you track progress.
New information security assessment
When the context changes, the process can be reassessed whilst retaining the previous history.
↻ The cycle continues over time
Digitaliso
Integrated into the Digitaliso ecosystem
Digital Risk Assessment does not operate in isolation from the rest of the Management System. D.R.A. forms part of the Digitaliso ecosystem and can link risk assessment to the information and activities already managed on the platform.
System Documetns
Non-conformities and Corrective Actions
Risk Based Thinking and R/O
↓ ↓ ↓
Supplier Assessment
Information Security
Digital Risk Assessment
D.R.A.
Assessment · Treatment · Monitoring
Data Analytics
Dashboard
↓
Cross-functional services and features
Setup
Classroom
Connettori Standard
The DIgital Risk Assessment becomes part of the Management System, bringing together information, activities and monitoring within a single environment.
Digitaliso D.R.A.
Incorporate Digital Risk Assessment into your management system
Find out how to structure, update and monitor your risk assessment using Digitaliso D.R.A., from the assessment of assets, threats and controls right through to the Risk Treatment Plan.
A dedicated session to explore the methodology, configuration and application of the D.R.A. in greater depth.