Tag: RISK MANAGEMENT

1. Introduction Risk analysis with Magerit is the reference methodology in Spain for assessing and treating risks to information systems. Developed by the former Ministry of Public Administrations and maintained by CCN-CERT, Magerit allows any organization, public or private, to identify its assets, understand the threats against them and calculate impact in an objective, reproducible way. In this article we apply the methodology to the real case of an SME with cloud services. Risk analysis with Magerit is not just a practical obligation to comply with the ENS (National Security Scheme) or regulations such as GDPR: it is a management …