Security Risk Assessment Resources.

• Author: Barbour, Tracy

The Alaska Department of Military and Veteran Affairs Division of Homeland Security and Emergency Management offers a number of resources to help organizations assess their security risks For example, they can take advantage of the Cybersecurity Vulnerability Analysis (CSVA), which is a non-regulatory review of cybersecurity management practices within an organization. Primarily, the CSVA is designed to build a risk matrix, threat indicators, maturity model, and prioritized recommendations. It also is intended to build the relationships necessary to foster cooperative arrangements during both normal operations and in times of crisis.

Incidentally, the CSVA is not an examination of all the IT business operations or a technical assessment. Also, all information collected by the CSVA Team becomes protected from public dissemination under the Homeland Security Act.

Organizations associated with industrial control systems can use the Cybersecurity Evaluation Tool (CSET), which is a Department of Homeland Security product that can be used by federal and private-sector entities. CSET assists users with protecting their key national cyber assets. The tool provides organizations with a systematic and repeatable approach to assessing...