We are Qmulos

In part 4 of this series, we look at how the Assess step of the Risk Management Framework is implemented using a data-driven approach.  The main objective of the Assess step is to “determine if the controls selected for implementation are implemented correctly, operating as intended, and producing the desired…

In part 3 of this series, we investigate meeting the Risk Management Framework's Implement step, using a data-driven approach. The main objective of the Implement step is to “implement the controls in the security and privacy plans for the system and for the organization and to document in a baseline…

In part 2 of this series, we investigate implementing the Risk Management Framework's Select step, using a data-driven approach.  The main objective of the Select step is to, “select, tailor, and document the controls necessary to protect the information system and organization commensurate with risk to organizational operations and assets,…