I will run a defensible cybersecurity risk assessment for your business

Jointli runs cybersecurity risk assessments that hold up in front of a regulator, an insurer, your board, or opposing counsel.

We use duty of care risk analysis. Every finding traces back to what we observed, impact is rated at its highest, and accepted risks are recorded with who accepted them, under what authority, and when they get revisited.

A full assessment delivers:

• A written risk analysis with clear criteria and a stated risk appetite
• A risk register where every finding traces to its evidence
• A record of accepted risks
• A defensibility packet ready for a regulator, a board, an insurer, a buyer of the company, or opposing counsel

Choosing a package:

• Risk Scoping Session: we define scope, systems and priorities with you.
• Focused Risk Assessment: one system or domain, with a written risk report and prioritized findings.
• Comprehensive Risk Assessment: the wider environment, and the starting point for a full engagement.

A governance program (security policy, named owners and decision rights, and a control register) is built on an accepted assessment and quoted by custom offer. Message us before ordering so we can confirm scope.