Welcome to Risk View DESIGNER

by Risk View Solutions

For Security Standards Risk Assessment and Audit Professionals

Identify and manage ALL risks against MULTIPLE security standards and models, in ONE place.

Example List

From standards identification, risk data gathering through to Risk Treatment categorization and management.

Supported by tools to define, measure, cost, compare, monitor & review assessment identified Risk.

Identify

Extent and degree of all Risk against standards or models, matched to your situation.

Support

Standard and bespoke Threat Catalogues & Risk Types with more tools to describe and quantify Risks.

Produce

Risk profiles supported by Treatment plan justification, for sign-off and action.

Result

Detailed business Risk metrics with actionable holistic to detail Treatment plan, reporting and Management.

Approach

Decide Focus Areas

Identify and create targets for assessment, be they organization-wide or down to a single asset.

Design and group how you want to view the results.

more ...

Select Imported/Created Standards

Choose multiple standards and models to reflect the needs for each focus area.

Modify any measures to reflect your risk profile, capabilities and needs.

more ...

Generate Assessment Tasks

Task lifecycle organizes the progress of allocated tasks to SMEs or security specialists.

Bespoke and standard guidance available to ensure considered responses.

more ...

Collect Risk Data

Various approaches and options to data validation and acceptance to suit.

Information validation using multiple responders supported.

more ...

Assess Risk

Accepted deviation from standards and models are dealt with both automatically and manually.

Identified risk is rated and categorized with other attributes, ready for risk decisions.

more ...

Plan Risk Treatment

Reviews for management approval covering risk, costs, time and other attributes.

Sign-off / authorization for risk allocation and acceptance.

more ...

Manage & Monitor

The shape and extent of your risk estate is seen in a single dynamic view.

Risk report from holistic to detail level, including attributes, status and costs.

more ...

Frequently Asked Questions

What Industry Security Standards and Maturity Models can be used?

We have not come across a security standard that cannot be incorporated into Risk View DESIGNER.

Here is a link to those we have imported:

Are Security Standards and Models included?

No. Managing and keeping all standards and models up to date within Risk View DESIGNER is not what we are about.

We will show you how easy it is to import or create Standards, after which you will then be responsible for maintaining them.

You may wish to join our “User Group” who would be happy to share with you the standards, models and frameworks they have created. Contact us for more details.

How easy is it to import an industry standard or questionnaire?

Really easy. We provide you with a format for the structure of the questionnaire. Import it and you can now further bespoke or change it using our design tools.

Can I import existing assessment results?

Yes. Contact us to discuss.

What are the installation options?

On premises, cloud or a cloud service provided by us to small consultancies. Contact us to discuss more details about implementation.

How do you charge?

See our Pricing.

How long should I allow for a demonstration?

Allow around 45 minutes for an overview showing the process from start to finish. For a detailed demonstration of how RVD could be configured to suit your environment allow another 20 minutes.

Can Risk View DESIGNER be used to measure any risk?

RVD can manage any entity, be it an asset, lifestyle, activity, operation … anything of your choosing that can be identified, together with it's attributes.

These entities can have an associated risk using unique or shared Threat Catalogues and also Risk Types, all of which you can design yourself using Risk View DESIGNER or use industry standard descriptions and terms.

The risk values and treatments and other attributes can be decided and managed, without a questionnaire in sight. You can of course use a mixture of both.