Threat & Risk Assessments

The Facilitated Threat and Risk Assessment is a new and easier method of performing traditional threat and risk assessments. The process includes a review of the system from a security perspective, identification of threats, assessments of current safeguards and vulnerabilities, as well as recommendations to improve the overall security of the system. A Facilitated TRA uses workshops to educate participants about the process and provides a venue for all users involved in the TRA process to contribute their opinions and expertise; it is also the primary method of information gathering for the assessment. Facilitated TRA’s can be conducted much more quickly than traditional TRA’s and provide a higher level of knowledge transfer than the traditional approach. The facilitated TRA leverages traditional TRA methodologies including the CSE, RCMP, and NIST risk assessment methodologies. The methodology is scalable and can be applied to single systems as well as larger scale enterprise implementations.