Enterprise Risk Assessment & Risk Register
Developed a comprehensive information security risk assessment by identifying assets, threats, vulnerabilities, existing controls, and treatment options using an ISO 27005-based methodology.
Effective security begins with understanding organizational risk. This project focused on building a structured risk management process that converts technical concerns into measurable business risks.
- Identify critical information assets.
- Assess threats and vulnerabilities.
- Calculate inherent and residual risk.
- Recommend treatment strategies.
- Maintain a living risk register.
- Excel Risk Register
- ISO 27005
- Likelihood & Impact Matrix
- Heat Map Dashboard
Catalogued assets, identified threats, evaluated vulnerabilities, calculated risk ratings, proposed mitigation plans, and tracked residual risk after treatment.
- Enterprise Risk Register
- Risk Heat Map
- Asset Inventory
- Treatment Plan
- Executive Risk Summary
This project strengthened my ability to translate technical weaknesses into business risks while improving my understanding of risk prioritization and governance reporting.