Information Security

3. Risk Management

The aim is to determine the possibilities, the kind and the expected costs of the measures which are necessary to reduce the revealed risks. In the following a so called risk-matrix is prepared to help bringing the necessary steps in an order of priority and a chronological order.

[In the following our concrete propositions:

• • 1. Examing the IT system
  • 2. Risk Analysis
  • 3. Risk Management
  • Business Continuity Plan - BCP:
  • Operational Continuity Plan - OCP:
  • Disaster Recovery Plan - DRP:
  • 4. Implementation of the technical system and Development of a regulation system