Your security and compliance glossary

All the terms you need to know when you’re trying to get compliance audit ready, fast.

Show filters

What is an ISO 27001 risk assessment?

An ISO 27001 risk assessment intends to help an organization identify, analyze, and evaluate weaknesses in its information security processes and procedures. 


A successful risk assessment process will help organizations:

  • Identify and understand specific scenarios in which information, systems, or services could be compromised or affected
  • Determine the likelihood or probable frequency with which these scenarios could occur
  • Evaluate the impact each scenario could cause to the confidentiality, integrity, or availability of the information, systems, and services
  • Rank risk scenarios based on overall risk to the organization’s objectives


To ensure an effective risk assessment, an organization will need to establish a risk management framework. This framework should be documented as a policy or procedure to ensure a consistent methodology when analyzing, communicating, and treating risks.

Additional resources you might like:

Compliance
Event
Ask Me (Almost) Anything: AI & Compliance

What does AI mean for your company’s security compliance program? Join our session on 28 March 9 am AEDT where Matt Cooper, Privacy, Risk and Compliance Manager at Vanta, and Noam Rubin, Sr. Software Engineer at Vanta, will answer (almost) all your questions about AI and compliance.

Compliance
Event
Vanta in Action: Vendor Risk Management

Join our live product demo on 14 March at 10 am AEDT where you’ll learn how VRM streamlines vendor security reviews

Compliance
Event
Automating SOC 2 compliance & more

Join Vanta’s 45-minute live product demo on March 12 at 11 am PST where Devin and Natalie will walk you through the Vanta platform and show you how we automate 90% of the work for security and privacy frameworks, and help you move towards a state of continuous compliance.

Get compliant and
build trust, fast.

Two wind turbines on a white background.
Get compliant and build trust,
fast.
Get started