The ability to manage the risks of your (ICT) organization is essential for success. Therefore, regular audits are necessary. Whereas a traditional audit will verify conformity and make less distinction between fundamental and less fundamental problems, our risk based assessments will deliver tangible wins for our clients.
Our focus is always directly on the business risks of the department or unit in question. We measure the probability, the impact, and the effect of every known risk for your business, as well as the corrective action to take. Our added value lies not only in the identification and prioritization of risks but also in our hands-on suggestions to mitigate them.
Typical focus points for the risk based assessment on the strategic level (COBIT/CMMi) are:
- IT organization
- IT strategy
- Portfolio Management (Projects & Services)
- Enterprise Architecture
- Business IT alignment
Typical focus points for the risk based assessment on the tactical level are:
- IT Service Management (ITIL V2/V3 - ISO20000)
- Project & Program Management (PMBOK / Prince2)
- Operations Management (ITIL V3)
The applied methodology or approach typically consists of 6 stages:
- SCOPE: Define scope of assessment (workshop)
- PLAN: Plan assessment
- EXECUTE: Execute assessment: review documents, interview people, interim findings
- CONSOLIDATE: Consolidate findings, prepare presentation
- ROADMAP: Define future roadmap
- PRESENT: Present findings and roadmap
Contact us to find out how we can identify and mitigate the risks in your organization
You can also start a short self-assessment of your ICT-organization at www.it-excellence.be