Your security and compliance glossary

All the terms you need to know when you’re trying to get compliance audit ready, fast.

Show filters

What is an ISO 27001 risk assessment?

An ISO 27001 risk assessment intends to help an organization identify, analyze, and evaluate weaknesses in its information security processes and procedures. 


A successful risk assessment process will help organizations:

  • Identify and understand specific scenarios in which information, systems, or services could be compromised or affected
  • Determine the likelihood or probable frequency with which these scenarios could occur
  • Evaluate the impact each scenario could cause to the confidentiality, integrity, or availability of the information, systems, and services
  • Rank risk scenarios based on overall risk to the organization’s objectives


To ensure an effective risk assessment, an organization will need to establish a risk management framework. This framework should be documented as a policy or procedure to ensure a consistent methodology when analyzing, communicating, and treating risks.

Additional resources you might like:

Company news
Event
What’s new in Vanta: Unveiling the Future of GRC Roadmap

We had the pleasure of hosting Jeremy Epling, Vanta’s CPO from our Vanta Sydney office, where he shares and demonstrates some exciting new product updates designed to help security teams future-proof and scale their GRC programs more easily.

Compliance
Event
Strategies for scaling your GRC program with automation and AI

As your business grows, there are increasing demands around GRC programs. Join us live, as we discuss what to consider when scaling your GRC program.

Product updates
Event
The Future of GRC

Join our virtual event broadcast to hear product updates and renowned security experts on the future of GRC.

Additional resources you might like:

Company news
Event
What’s new in Vanta: Unveiling the Future of GRC Roadmap

We had the pleasure of hosting Jeremy Epling, Vanta’s CPO from our Vanta Sydney office, where he shares and demonstrates some exciting new product updates designed to help security teams future-proof and scale their GRC programs more easily.

Compliance
Event
Strategies for scaling your GRC program with automation and AI

As your business grows, there are increasing demands around GRC programs. Join us live, as we discuss what to consider when scaling your GRC program.

Product updates
Event
The Future of GRC

Join our virtual event broadcast to hear product updates and renowned security experts on the future of GRC.

Compliance
Blog
How to scale your GRC program with automation

Manual GRC processes aren’t sustainable for growing businesses. That’s where GRC automation comes in. Read more.

Compliance
Blog
3 trends shaping the future of GRC and how to adapt today

Managing GRC today still requires a ton of manual work—but it doesn’t have to. Find how the future of GRC is evolving and how you can adapt today.

Compliance
Event
Audit Prep Excellence: Your Path to Success

Join our interactive webinar featuring experts in compliance auditing for a live Q&A session. We'll dive into essential tips for preparing for various compliance audits, guide you through the nuances of both ISO 27001 and SOC 2 standards, and discuss best practices for maintaining continuous compliance.

Compliance
Event
Unlocking the Full Potential of Vanta's AWS Integration

AMAA webinar: Simplify your AWS integration experience and overcome common setup challenges with our interactive webinar featuring experts from Vanta and AWS. Get essential tips for first-time AWS connections, learn to integrate services like EKS, IdentityStore, CodeCommit, and more, and stay updated with CIS Benchmarks. Register today to secure your spot or receive the recording if you can't attend live.

Compliance
Event
How to streamline security reviews with Trust Center

As the number and severity of third-party breaches continue to rise, companies are scrutinizing more closely not just on how they handle data, but how their vendors do as well. For security leaders, this means more security reviews are coming across their desks every day. Join us to learn how Vanta Trust Center can help streamline security reviews.

SOC 2
Event
Ask Me (Almost) Anything: Post-Audit Planning and Excellence

Navigate post-audit success with Vanta & A-LIGN. Get expert advice on leveraging findings for growth. Register for access or recording.