CISM - Threat and Risk Assessment(TRA) Report

---

Hi ,

I am doing a Info Sec Masters degree now and for one course I am doing now it focused on the CISM review manual.

I have been watching the CISM videos but I need to write a TRA for my course. I have the company details/profile and a gap analysis highlighting the problems found.

I need some examples of a TRA so I can write this report, do you have any or know of any?
(this would be an awesome video series btw)

Any help is appreciated

Thanks

Rob

@Robert-Whittaker,

We're trying to get a reply to you from Brian, hopefully we'll hear soon!

@Robert-Whittaker Brian O'Hara responded with this info:

I am not sure how to respond to this as there are many factors to consider when looking at a solution such as:

1. Size of the organization
2. Primary activities
   a. Compliance issues?
   b. E-commerce, etc.

One good place to start with I have found is the FFIEC Cyber Security Assessment. I am attaching the PDF. While this is primarily set to be used in the Financial Services sector, it can be used just about anywhere and I like it as part of an overall approach to Risk Management as it is intended to be completed by,, therefore engages, the BOD of the organization.

If you need more specific details please let us know.

Hi Angie,

I could not download that pdf , it said the folder was empty. Anyway i have been provided a GAP analysis and need to write up a TRA based on that. [link text

Assignment details are here.
https://1drv.ms/f/s!AhqGDqaBrxSQx0ti0w4EijNXS9vy

I am having the most trouble taking the results of the gap analysis and putting them into a vulnerability and threat table and then in a risk treatment plan. any suggestions or guidance is appreciated.

thanks
Rob

@Robert-Whittaker Try the link again. Sorry about that!

@Angie I tried the link and it did not work for me. I was also hoping that the show notes and downloads for the CISM course would be there, but I could not find any.
Thanks
Derek

@derek-agar252 I apologize for that! The link to the document above should now work. Thanks for your patience.