Risk Assessment
A regular Risk Assessment process is crucial to ensure your business is aware of the risks of handling sensitive data, for example Cardholder Data, Passport Numbers, Financial Data, Payroll and Names and Addresses.
Blackfoot initiate the Risk Assessment process by co-ordinating a workshop to identify Risks to make sure a measured approach is taken to implementing controls.
There are a number of information security and risk assessment standards that complement PCI DSS, , including:
- ISO 27001
- BS 7799
- ISO TR 13335-3
- NIST SP 800-26/30
- The UK Risk Assessment Standard