Risk management user guide

Riesgo Risk Management walkthrough : 

Riesgo Risk Management walkthrough

OverviewThis overview will walk you through how Riesgo Risk management handles the following IS27001 principles: : 

OverviewThis overview will walk you through how Riesgo Risk management handles the following IS27001 principles: Create organisation Create ISMS forum Create Department point of contact (DPOC) Create IS draft Send IS policy to ISMS forum Receive feedback from ISMS forum member Dissemination of approved IS Policy to the organisation

Slide 4: 

IS manager logs on and changes password

Password change confirmation : 

Password change confirmation

Slide 6: 

Dashboard showing compliance levels

Slide 7: 

IS manager can change the look and feel

Slide 8: 

Creation of the business units

Slide 9: 

Creation of the sub business units

Slide 10: 

IS manager can see the org chart Click to go to the particular dept

Slide 12: 

Navigation allows a drill down to departmental level

Slide 13: 

IS manager create users at the departmental level

Slide 14: 

IS manager can create members of the ISMS forum

Slide 15: 

Creation of the ISMS forum members

Slide 16: 

IS manager creates a draft IS policy

Slide 17: 

Upload of the IS Policy List of ISMS members that will be Included in the distribution

Slide 18: 

Upload of the policy from a local drives

Slide 19: 

Creation of a deadline by which Feedback is required

Slide 20: 

Inclusion of the main changes in the policy

Slide 21: 

Version number of the policy

Slide 22: 

ISMS forum members selected to be included in the distribution

Slide 24: 

Email sent to ISMS members with draft policy attached

Slide 25: 

IS manager screen indicates the ISMS members are yet to review the policy

Slide 26: 

ISMS forum member is able to log with the detail sent by the system

Slide 27: 

ISMS forum member logs on

Slide 28: 

ISMS member is presented with a screen to acknowledge receipt of the policy

Slide 30: 

ISMS forum member reviews, approves and provides feedback for the draft policy

Slide 31: 

Policy is approved and sent off

Slide 33: 

IS manager screen indicates that the policy has been approved by one ISMS forum member

Slide 34: 

IS manager screen indicates that all ISMS forum members have approved the policy

IS manager able to promote Policy to live : 

IS manager able to promote Policy to live

Slide 36: 

All the organisation is notified of the new policy - This complies with the dissemination of IS policy

Notification sent to all Business units : 

Notification sent to all Business units

Slide 38: 

The IS policy and organisation modules complied with

Slide 39: 

Audit report shows a complete audit trail indicating compliance With the IS027001 controls

Slide 41: 

Incident management policy

Slide 42: 

Compliance with ISO27001 with review frequency to ensure compliance

Achievements : 

Achievements These simple steps have completely and effectives covered the following IS027001 modules: IS Policy document IS organisation Incident management Compliance – Audit