))
Episode 93: Risk Assessment and Gap Analysis
Manage episode 490277335 series 3673170
Contenuto fornito da Jason Edwards and Dr. Jason Edwards. Tutti i contenuti dei podcast, inclusi episodi, grafica e descrizioni dei podcast, vengono caricati e forniti direttamente da Jason Edwards and Dr. Jason Edwards o dal partner della piattaforma podcast. Se ritieni che qualcuno stia utilizzando la tua opera protetta da copyright senza la tua autorizzazione, puoi seguire la procedura descritta qui https://it.player.fm/legal.
Risk assessments help prioritize security controls by identifying vulnerabilities, evaluating threats, and estimating potential impacts. In this episode, we break down how to conduct both qualitative and quantitative assessments, including risk matrix construction, asset valuation, and likelihood estimation. We also explain gap analysis—comparing current security posture against frameworks, regulations, or internal standards to find missing controls. CISSPs must be able to interpret these assessments, communicate their implications to stakeholders, and use them to justify security investments and policy changes.
138 episodi
Condividi
