Context and critical assets
Identify essential services, data, people, systems and dependencies. Start with the effect on the organisation’s work.
INTELLOPE / IN PRACTICE
Turn risk into
an informed decision.
Connect technology risks to real consequences: disruption, data loss, inappropriate access and supplier dependencies. The outcome is a prioritised plan with owners, controls and evidence.
Assessment and register
Describe the scenario, likelihood, impact, existing controls and residual risk. Shared criteria make priorities comparable.
Risk treatment
Choose proportionate actions: reduce, avoid, transfer or knowingly accept risk. Assign an owner and due date to every action.
Continuity and recovery
Impact analysis, service priorities, dependencies and recovery exercises. Agree RPO/RTO objectives and validate them through tests.
Assessment readiness
Support gap assessments, inventories, access reviews, procedures and evidence collection for ISO 27001 programmes and applicable requirements.
Review and change
New systems, incidents and supplier changes can alter risk. Review actions, exceptions and ownership with management.
How we work
Baseline
Scope, assets, dependencies and existing controls.
Assess
Scenarios, impact, likelihood and priorities.
Treat
Ownership, dates and technical/organisational measures.
Verify
Evidence, exercises, reviews and risk-register updates.
What is included
- Risk registers, impacts and treatment plans
- Business continuity and disaster recovery
- Gap assessments and ISO 27001 preparation support
- Technical support for NIS2 and data protection programmes
This service is not a legal opinion, certification or automatic compliance attestation. Readiness and audit scope are agreed for the organisation.
SCENARIO / DELIVERY
Example: loss of a central system
Assess which activities stop, who decides and how work continues. The treatment plan may include a recovery copy, alternative procedures and a documented restoration exercise.
- 01Identify
- 02Assess
- 03Treat
- 04Review
What you receive
- Risk register and shared assessment criteria
- Treatment plan and action owners
- Continuity priorities and exercises
- Evidence pack and review records
Useful questions
Does preparation automatically mean ISO 27001 certification?
No. We support readiness and remediation; the relevant independent certification body issues certification.
Do you establish complete NIS2 or GDPR legal compliance?
We provide technical and organisational support. Legal applicability and conclusions need organisation-specific assessment with the appropriate professional.
LET’S BUILD WHAT’S NEXT
A specific challenge? Let’s start there.
We connect expertise, people and technology around your project.
CONTACT / INTELLOPE
Tell us what you need
Contact us about a project, a question or an IT issue.
Do not send passwords, access codes or sensitive data.
You can also email [email protected].