RiskToolKit

WISP Dashboard

• Dynamic graphical reporting on the real-time status of your critical WISP (Written Information Security Program) elements.

• Up-to-date actionable data on your WISP.

• Easy access for management to understand and manage your WISP.

Information Security Risk Assessment Tool.

• The foundation for developing and implementing your WISP.

• Assessment is based on the ISO 27000 Security Framework Standard.

• Annual assessments are guided and reviewed by RiskSmart InfoSec professionals.

• • Management of assessment answers are entered and retained via the RiskPortal.

• Compliance deficiencies that require remediation are identified maintained and managed via the RiskPortal.

Remediation Prioritization

• RiskSmart will recommend your remediation prioritization plan based upon the findings of the assessment results via the RiskPortal.

• Continuous management and visibility to the status of those prioritizations is provided via the RiskPortal.

Information Security Policies

• Complete set of enterprise quality InfoSec policies.

• Policies can be readily downloaded, adopted and uploaded again to the portal for central distribution and viewing through the RiskPortal.

• User policy access and visibility all provided through the RiskPortal.

Service Provider/Business Associate Management

• The ability to survey any and all service providers/business associates to query for their critical information security capabilities through the WISP Dashboard.

• Addresses regulatory and contractual requirements.

• Survey results are used to populate the RiskPortal dashboard's color coded display for quick and easy monitoring of the WISP status of your vendor network.

Information Security Awareness Training

• Online information security awareness training.

• Testing on the training comprehension, with pass/fail metric.

• Certified for successful completion with passing grade.

• Periodic user progress reporting to the administrator.

• Delivered through the RiskPortal.