With more and more CIOs being asked to conduct asset risk assessments, a Virginia GRC firm has unveiled a point-and-click solution that won’t break the budget. “Our tools have been engineered to give CIOs full line of sight across the organization’s risk landscape and to help them identify steps they can take to mitigate risk in a familiar drag-and-drop interface,” explains Steve Crutchley, founder and CEO of C2C SmartCompliance (c2csmartcompliance.com). Crutchley’s firm offers a trio of easy-to-use web- or enterprise-based risk management and compliance solutions that can be tailored for implementation.

Depending on the specific needs of the organization, many CIO's will be more than satisfied with the firm’s My Risk Assessor™, product, which was designed specifically for conducting risk assessments and business Impact Assessments (BIA). This includes everything from the risks associated with products and services to personnel, hardware, software, and infrastructure — essentially any type of risk outside the traditional realm of finance. My Risk Assessor™ gives CIOs the capability to map a business impact analysis to a specific asset, owner, requirement or regulation.

“Since all assets are subject to threats and vulnerabilities, our products come preloaded with capabilities to detect and prioritize series of possible threats, vulnerabilities, and mitigating controls,” according to Crutchley, whose firm has more than 25 years of Governance, Risk and Compliance auditing and consulting experience.

My Risk Assessor™ includes an automated statement of applicability (SoA), automated risk treatment plans, gap analyses reports and comparative analyses. Other features include:

• Easy-to-use interface
• Structured approach and proven methodology
• Customizable weighting capability according to the importance of assets
• Customizable risk scenarios
• Prepopulated threat libraries
• Ability to add new threats
• Automated reporting of threats, vulnerabilities and controls
• Customizable properties
• Interactive report capability
• Automated Statement of Applicability (SoA) for ISO/IEC 27001