IT AND RISK MANAGEMENT

@-yet IT risk management modules:

• Risk Analysis
• Availability Analysis
• Security Analysis

I. Risk Analysis:
Compilation of a realistic estimate of hazards at organisational and technical level. Identification of risks in relation to an application and assessment from a technical point of view:

• IT Infrastructure Design:
  Analysis of the overall design of the IT structure, such as data center, network, release status.
• IT Implementation:
  Quality of implementation and other constants.
• IT Operations:
  Determination of the transparency and security of business processes.
  

II. Availability Analysis:
Analysis and evaluation of the IT infrastructure; testing of measures for protecting against breakdowns and emergency plans.

• Development of strategies and implementation.
• Application availability:
  Optimization of server and application infrastructure.
• Data Availability:
  Extension of existing and development of new storage and backup concepts - for secure and available data.
• Communication:
  Securing of data exchange via networks such as LAN, WAN, SAN and adaptation to traffic density.
• System Management:
  Implementation of appropriate tools and methods for the proactive monitoring and trend analysis of IT systems.
  

III. Security Analysis:
Assessment of the confidentiality of information transfers and data protection; establishment of tools such as authentication or guidelines for secure cooperation.

• Security Scan:
  Checking of IT systems for security risks, naming and assessing these.
• Security Audit:
  Checking for security risks, naming and classification of technology and organization and their interaction.
• Security Configuration:
  Implementation of necessary security solutions in the areas of organization and IT.