))
Conducting Risk Assessments (Domain 5)
Manage episode 489039963 series 3671917
Content provided by Dr. Jason Edwards. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Dr. Jason Edwards or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ppacc.player.fm/legal.
Risk assessments provide the data organizations need to make informed security decisions, and in this episode, we explore the different types of assessments and how they’re conducted. We start by comparing ad hoc, recurring, one-time, and continuous assessments, each of which serves different operational or compliance needs. We explain how to scope an assessment, identify stakeholders, gather data, and evaluate controls to determine risk levels for systems, processes, or projects. Tools like questionnaires, interviews, vulnerability scans, and compliance checklists feed into both qualitative and quantitative models, supporting detailed prioritization and reporting. We also address how to align assessment timing with change management, regulatory deadlines, or business initiatives to maximize relevance. Conducting assessments isn’t just about checking boxes—it’s about uncovering blind spots, enabling dialogue, and guiding smart decisions.
221 episodes
Share
