Analyse Business and Environment

By taking a real company( business organization) Identify and analyze the business and the outside world related to information security based on: not hypothetical) it has been currently existing organization

Business internal stakeholders internal prerequisites critical information assets Environment external stakeholders external prerequisites legal requirements

Analyse Risk

Perform a risk analysis with a focus on information security by: From the critical information assets identified in the Business Analysis, select appropriate information assets to proceed with Identify threats and vulnerabilities Make a risk assessment - probabilities and consequences Develop suggestions for action

Analyse Gap

Perform a Gap analysis with a focus on information security by: Identify the applicability of information security controls Document the current situation Document improvement suggestions