Risk Assessment without the fear
Infosecurity Europe, London, April 24, 2007– With more and more businesses pursuing ISO 27001 compliance for their information security, Vigilant Software (www.vigilantsoftware.co.uk) has launched an affordable and intuitive software tool that transforms the process for performing an ISO 27001-compliant risk assessment. vsRiskTMis a unique, purpose built application that dramatically reduces the time and cost of pursuing ISO 27001 compliance and is compatible with multiple related standards.
vsRisk is a wizard-based application that simplifies and accelerates the risk assessment process. It is uniquely well placed to satisfy the demands of ISO 27001, as it enables the user to assess the confidentiality, integrity and availability of three key aspects of information assets, namely Business, Legal and Contractual. It enables the user to capture their information security policy and objectives, plus the scope of their Information Security Management System, and permits a rapid appraisal of all key areas, including Groups, Assets and Owners. Its in-built audit trail, comparative history, comprehensive reporting and gap analysis radically reduce the manual record keeping traditionally associated with risk assessments.
In addition to supporting ISO 27001, vsRisk supports ISO/IEC 17799; complies with BS7799-3:2006; conforms to ISO/IEC TR 13335-3:1998 and NIST SP 800-30; and complies with the UK’s Risk Assessment Standard.
vsRisk makes ISO 27001 compliance achievable for a far wider range of organisations and professionals by minimising the need for specialist knowledge and significantly undercutting the cost of existing risk management tools.
Alan Calder, chief executive of IT Governance, commented, “vsRisk has been designed with the user in mind and is the first risk assessment tool specifically designed for ISO 27001. Its uniquely tailored features, highly intuitive style and unrivalled value for money make it the perfect tool for the rapidly growing number of firms pursuing best practice, ISO-compliant information security.”