Information security risk assessment
ISO 27001 and NIS2 both start from a risk assessment. We run it with your team in one session and deliver the register and the plan.
What you get
One organisation, up to 100 staff, one session.
- 01A risk method with criteria for likelihood and impact
- 02A three-hour session with your team
- 03A risk register with an owner for each risk
- 04A treatment plan with actions, owners and dates
- 05A summary for management
Four steps
- 01
Order and intake
Order online and answer the intake questions. About ten minutes.
- 02
Pick your date
Choose the start date, or the date of the session, in your portal.
- 03
The work
A vetted specialist does the work with a fixed method and template.
- 04
Check and delivery
The result is checked against the method's checklist and delivered to your portal.
Fixed price
Paid in full at order, excluding VAT. One round of changes is included.
Before you order
Who does the work?
A vetted specialist working with our fixed method and templates. Every result is checked against the method's checklist before it reaches your portal.
What if we need changes?
One round of changes is included. Anything outside the scope on this page is quoted before it is done.
When can you start?
From three working days after you order, on the working day you choose in the portal.
Is this legal advice?
No. We are compliance specialists, not lawyers. We describe what a standard or regulation asks and how to organise it; decisions stay with your organisation. Where a contract or a legal position is at stake, involve your lawyer.