stream: integrated management systems · systems, such as an iso 27001 information security...

STREAM: Integrated Management Systems © Acuity Risk Management LLP 2017 With STREAM you can automate individual or mulple integrated management systems, such as an ISO 27001 Informaon Security Management System and a wide range of other management systems for cyber security, business connuity, health, safety and environmental, quality or supply chain management. STREAM supports all aspects of the internaonal management system Plan, Do, Check, Act (PDCA) Cycle. Enterprise GRC Software Plan (Establish the Management System) Record assets and scope Specify risk and control assessment approaches, measurement criteria and thresholds Tailor the risk assessment scheme Idenfy, analyse and evaluate risks Idenfy and evaluate risk treatment opons Review residual risk and present for approval Report on Top 10 risks by MS or across mulple MSs Prepare a Statement of Applicability Support for the PDCA Cycle Check (Monitor & Review the MS) Log incidents and near misses Record the impact of incidents and link to risks and controls Tailor the incident recording criteria Report on incidents and near misses by MS or across mulple MSs Monitor the performance of key control indicators and key risk indicators Report on control effecveness, history and trends Review risk assessments Monitor risk status against risk appete and risk ac- ceptance Report on risk history and trends Do (Implement & Operate the MS) Formulate a risk treatment plan Measure and monitor the effecveness of controls Tailor the control assessment scheme Report on the effecveness of controls by MS or across mulple MSs Act (Maintain and Improve the MS) Raise improvement acons, assign ownership, and target dates and link to supporng documents Track improvement acons See the effect of completed acons on risk registers and reports Unrivalled configurability Easy to use Scalable Aconable intelligence

Upload: others

Post on 01-Aug-2020

1 views

Category:

Documents

0 download

Report

Download

Embed Size (px):

TRANSCRIPT

STREAM: Integrated Management Systems

With STREAM you can automate individual or multiple integrated management

systems, such as an ISO 27001 Information Security Management System and a wide

range of other management systems for cyber security, business continuity, health,

safety and environmental, quality or supply chain management. STREAM supports all

aspects of the international management system Plan, Do, Check, Act (PDCA) Cycle.

Enterprise GRC Software

Plan (Establish the Management System)

Record assets and scope

Specify risk and control assessment approaches, measurement criteria and thresholds

Tailor the risk assessment scheme

Identify, analyse and evaluate risks

Identify and evaluate risk treatment options

Review residual risk and present for approval

Report on Top 10 risks by MS or across multiple MSs

Prepare a Statement of Applicability

Support for the PDCA Cycle

Check (Monitor & Review the MS)

Log incidents and near misses

Record the impact of incidents and link to risks and controls

Tailor the incident recording criteria

Report on incidents and near misses by MS or across multiple MSs

Monitor the performance of key control indicators and key risk indicators

Report on control effectiveness, history and trends

Review risk assessments

Monitor risk status against risk appetite and risk ac-ceptance

Report on risk history and trends Do (Implement & Operate the MS)

Formulate a risk treatment plan

Measure and monitor the effectiveness of controls

Tailor the control assessment scheme

Report on the effectiveness of controls by MS or across multiple MSs

Act (Maintain and Improve the MS)

Raise improvement actions, assign ownership, and target dates and link to supporting documents

Track improvement actions

See the effect of completed actions on risk registers and reports

Unrivalled configurability Easy to use Scalable Actionable intelligence

Page 2: STREAM: Integrated Management Systems · systems, such as an ISO 27001 Information Security Management System and a wide range of other management systems for cyber security, business

Example Risk Register (single MS)

Example Group Summary (multiple MSs)

For further information on

STREAM or Acuity Risk

Management please contact us:

[email protected]

www.acuityrm.com

+44 (0) 20 7297 2086

@AcuityRM

Acuity Risk Management

London-based, Acuity Risk

Management was formed in

2005 to provide integrated risk

management and compliance

software solutions and services.

STREAM Integrated Risk

Manager was launched in 2007

and adopted by major

corporations and government

agencies for a range of risk and

compliance applications,

including Cyber Risk, Enterprise

Risk Management, Operational

Risk, Business Continuity,

Health, Safety and

Environmental Management.

Acuity’s consultants have

implemented risk management

processes and software

solutions for hundreds of

organisations in every major

business sector. STREAM itself

is being used in over 100

countries. Watch a demo video

or download the free single-user

version of STREAM on our

website. Example control deployment status

(multiple MSs)

1 Management Information Systems Information Security Management Chapter 12

Systems Engineering and System Security Engineering ... · Systems Engineering and System Security ... chain risk management – Security ... system security requirements into the

Towards Security of Integrated Enterprise Systems Management

AVIATION SECURITY MANAGEMENT SYSTEMS : A … security management systems : a practical guide (5 days) ... exercise/case study: ... aviation security management systems : a practical

IT Security and Risk Management - Visionet Systems

INFORMATION SECURITY MANAGEMENT SYSTEMS IN …yadda.icm.edu.pl/yadda/element/bwmeta1.element.baztech-113db9a6-3d90...offices information security management systems are implemented,

CIS 310 Management Information Systems Information Security

Information Security Management Systems: A Novel Framework

Certified Information Systems Security … Information Systems Security Professional (CISSP) Course 1 - Information Security and Risk Management

Information Security and Quality Management Systems

Security management systems for the supply chain ... · Requirements for bodies providing audit and certification of supply chain security management systems

The Security Framework for Workflow Management Systems

Panda Security - Presentación Systems Management

Key Management Network Systems Security Mort Anvari

ISO 27001 Information Security Management Systems (ISMS ...phoenix.issa.org/.../uploads/2012/12/2013-Q1-SecuraStar_ISO_27001.pdf · ISO 27001 Information Security Management Systems

A guide to integrated security management systems · 2020. 1. 10. · These systems are often called Integrated Security Management Systems (ISMS) as they bring together the management

CIP -007 -5 Cyber Security Systems Security Management · CIP -007 -5 Cyber Security Systems Security Management 4.1.7 Transmission Operator 4.1.8 Transmission Owner 4.2. Facilities:

Lifecycle Management and Security - STMicroelectronics · Lifecycle Management and Security Joe Pilozzi. Embedded Systems Conference Fortifying an IoT Device . Embedded Systems Conference

Data management, privacy, and security in connected systems...04 Data management, privacy, and security in connected systems Data management, privacy, and security in connected systems

Security management systems for the supply chain ... · ISO/PAS 28003 (Rev. 1.v.4) security management systems. Certification of supply chain security management systems is a third

Societal security — Business continuity management systems ... · Societal security — Business continuity management systems — Guidance . Sécurité sociétale — Gestion de

Qualificationbased Security Management Systems …exemplarglobal.org/.../pcd57-qb-scyms-certification-requirements.pdf · Certification Requirements Qualification-based Security Management

Information Systems Security Information Security & Risk Management

Practical Applications for Automation Systems Management - SANS Cyber Security ... · Practical Applications for Automation Systems Management Walter Sikora, Vice President, Security

CMGT/441 Intro. to Information Systems Security Management

Autonomic Security Management of Industrial Systems

Supply Chain Security Management Systems · ISO 28000 Supply Chain Security Management Systems Certification ISO 28000 specifies the requirements for a supply chain security management

Security Checking in Relational Database Management Systems

ISO 27001 Information Security Management Systems

Societal security — Business continuity management systems — Guidelines ...TS+22317-2015.pdf · ©ISO 2015 Societal security — Business continuity management systems — Guidelines

Information security management systems — Specification ... · BRITISH STANDARD BS 7799-2:2002 Information security management systems — Specification with guidance for use ICS

Information Security Management Systems Certification ... · PDF fileaudit guideline, management ... ISO/IEC 27001-Information security management systems ... and Iso/Iec 20000:05

REfflYON VII, GITNANG - depedbogocity.ph · Certified Information Security Management Systems Lead Auditor Certified Information Security Management Systems Lead Implemerrter Certified

Information Systems Security Management: A Literature Review

NGOs Field Security Management Approach & Systems 2.pptx