vsRisk™ v1.6 - the Cybersecurity Risk Assessment Tool

vsRisk is a unique software tool designed to guide your organisation through the process of carrying out an information security risk assessment that will meet the requirements of ISO 27001:2005.

vsRisk™ v1.6 - the Definitive ISO27001:2005-compliant Cybersecurity Risk Assessment Tool (CD-Rom)

vsRisk delivers the results you are looking for through key features including:

• Assessing key areas such as Groups, Assets and Owners
• Capturing your IS policy, objectives and ISMS scope
• Assessesing asset attributes on Confidentiality, Integrity, and Availability, in relation to Business, Legal, Contractual issues
• Group assessment functionality simplifies multi-asset risk assessments
• In-built audit trail and comparative history
• Comprehensive ISMS risk assessment reporting and gap analysis

This unique vsRisk Risk Assessment Tool:

• Automates and delivers an ISO/IEC 27001-compliant risk assessment
• Uniquely, can assess confidentiality, integrity & availability (CIA) for each of business, legal and contractual aspects of information assets - as required by ISO27001
• Gives comprehensive best-practice alignment

Aligns with every important information security risk assessment and best-practice standard worldwide:

• Supports ISO27001
• Supports ISO/IEC 27002
• Complies with BS7799-3:2006
• Conforms to ISO/IEC 27005:2011
• Conforms to NIST SP 800-30
• Complies with the UK's Risk Assessment Standard
• Wizard-based approach simplifies and accelerates the risk assessment process
• Integrated, regularly updated, BS7799-3 and ISO27005 compliant threat and vulnerability databases
• Customisable assessment scales and risk acceptance criteria
• Contains all ISO 27001/ISO 27002/ISO 27005 controls with additional control databases available
• Produces an audit-ready Statement of Applicability
• Produces a Risk Treatment Plan for immediate use
• Backup and restore capability
• Clear, clean user interface with integrated help, making the tool easy to use

New features in vsRisk 1.6:

• Group asset functionality simplifies multi-asset risk assessments;
• Asset types now represented by individual icons in the navigation tree;
• Navigation tree height adjsuts with screen size;
• User interface can be expanded to full screen size;
• Asset owners can have their own access details;
• A secondary lead risk assessor can be added to the tool;
• Can be network-enabled (requires purchase of an additional licence key)
• Has an annual support and upgrade package

Risk Assessment Tools

It is extremely difficult to carry out a risk assessment that will meet the requirements of ISO27001 without using a specialist information security risk assessment tool. While there are a wide range of products on the market that claim to meet these requirements, the reality is that there are very few. There's just one risk assessment tool that IT Governance recommends:

• vsRisk v1.6 – the Cybersecurity Risk Assessment Tool – the Definitive Standalone ISO27001:2005-compliant Cybersecurity Risk Assessment Tool.

• vsRisk v1.6 - Network Enabled Cybersecurity Risk Assessment Tool - fully accessible from a network.

It’s so straightforward, and so quick to use, it can save you a significant amount of the budget you might otherwise spend on consultancy advice at this stage of the project – which is why one consultancy firm told us: "Why would we want to use this with our clients when it is going to reduce the number of days we can bill them?"

Would you like to reduce the days your consultants bill you for?