Risk, Resilience & Information Security

Scope is agreed around your organisation’s requirements, available information and responsibilities.

Topics for scoping

• Risk-management frameworks
• Risk criteria
• Risk registers
• Treatment plans
• Operational risk
• Risk workshops
• Control assessment
• Business impact analysis
• Business continuity
• Continuity procedures
• Organizational resilience
• Crisis preparedness
• Information-security management systems
• Information-security documentation
• Audit preparation
• Corrective actions
• Management reviews

Frameworks relevant to this scope

ISO 31000 · IEC 31010 · ISO/IEC 27001 · ISO 22301

These references describe subject matter. They do not state that QSE Advisory is certified, accredited, authorised by, or partnered with these bodies. Applicability and current requirements are checked when agreeing the work.

Agreeing an engagement

We discuss the context, information required, deliverables, responsibilities and review arrangements before confirming a proposal. Certification, assurance and other independent decisions rest with the relevant independent bodies.