Mapping assets, threats and vulnerabilities and preparing the SoA.
In the one-day workshop, classification of information assets, threat-vulnerability mapping, risk scoring and selection of the 93 controls are practised on a sample company. Participants leave with a risk register template and a draft SoA for their own company.