Risk Management

A sound Risk Management program is an essential requirement for any organization relying on information technology to support their business. Technology itself cannot eliminate all perils that an organization will face. Identifying areas of risk, determining the extent of that risk, and providing adequate safeguards to reduce that risk, considering the business environment, user requirements, and technology environment should be the objective of any organizational risk management program.

Avaleris provides Risk Management services for assisting organizations with enterprise IT Security challenges. Our proven methodology is based on security best practices as defined by ISO 17799, GMITS and COBIT. Our project management methodologies are consistent with the Project Management Institute and compliant with Government Security Guidance from organizations such as the Canadian Security Establishment (CSE) and U.S. National Institute of Standards and Technology (NIST).

Our Risk Management service offerings include:

• Facilitated Threat and Risk Assessment (TRA)
• Vulnerability Assessments and Penetration Testing