- Planning and scoping
- Designing and developing the risk assessment
- Identifying key controls
- Documenting controls and/or documentation gap analysis
- Evaluating and testing the design and operating effectiveness
- Prioritizing and remediating control deficiencies
- Reporting to stakeholders
- Building sustainable compliance processes
PLANNING
Project planning and management
QUALITY
Risk assessment, identify relevant controls, gather info
RELIABLE
Analysis, conduct testing, remediation roadmap
AFFORDABLE
Findings and recommendations, final report