Dear All,
From our Organisation, we are looking for some trainings related to mobile application security risk assessment.Which should be useful for enterprise risk management,we don't need secure coding/penetration testing related.
Can anyone please help?
Many Thanks,
Vivek
Replies
Check out the NIST Cybersecurity Framework document. It provides a fairly comprehensive checklist of what to iD and assess. One caveat, such a sweeping assessment should be conducted periodically since the threats change so rapidly rather than just doing it once and not worrying about changes. Even the Framework needs to change on a fairy short period tho I don't know if that is happening.
Hi Vivek,
I am not quite sure what exactly you are looking for!? When it comes to Security Risk Assessment methodologies and software I could certainly help.
Please feel free to drop me a line using: eisinger@eisenburg-solutions.com
Best regards,
Guenther