The webinar covers: • Introduction and the challenges related to Information Security Risk Assessments • Overview of Methodologies used in practice today • Details of how a Hybrid Solution was selected and developed by our team to address the challenges Presenter: The webinar was presented by PECB Trainer and partner Mr. Bevan Lane who has 16 years of experience as a consultant in information security, firstly with PwC and then as an independent consultant. Mr. Lane has also an extensive experience in information security risk assessment and training and has implemented solutions for major organization across the globe. Link of the recorded session published on YouTube: https://youtu.be/3mYZ5Nd14q8

1. Thin End of the Wedge:
IS Risk Assessments
January 20 2016
Bevan Lane
v

2. vBevan Lane
Director at Infosec Consulting
Mr. Bevan Lane has more than 16 years of experience as a consultant in information security,
firstly with PwC and then as an independent consultant. Mr. Lane has also an extensive
experience in information security risk assessment and training and has implemented
solutions for major organization across the globe.
+27829283620
bevanlane@icloud.com www.infosecconsulting.co.za
linkedin.com/Bevan Lane

3. Agenda
agenda
• Introduction
• The Challenge
• The Hybrid Solution
• End Results

4. Why the Thin
Edge?

5. Introduction
Importance
of Risk
Assessments
Integration
into Business
Focus on
Information

6. Issues with information security risk
assessment
Based on assumptions Confusing Concepts Based on knowledge
Tick List Exercises Reports go nowhere Incorrect focus

7. Different types…
Source: NIST SP 800-39

9. The Challenge
IEC 62443
ISO 31000

10. The Hybrid Solution

11. The Hybrid Solution

12. The Hybrid Assessment
Source: NIST SP 800-30 Revision 1 (Guide for conducting Risk Assessments) Chapter 3

13. End Results
v
?
QUESTIONS
+27829283620
bevanlane@icloud.com www.infosecconsulting.co.za
linkedin.com/Bevan Lane
THANK YOU