#SAMPLE SECURITY ASSESSMENT PROPOSAL SERIES#

Achieved a better understanding of their cyber risk, which could then be more effectively communicated within their business model.

Working with our CyQu product, Aon delivered a combined Cyber Impact Analysis and Security Maturity Review, which allowed our client to baseline their current cyber risk posture, and to provide a yardstick to measure progress as they improved their cyber posture. Not only did the business want to better understand its core cyber risk as it evolved its core business model, it wanted to align its IT, information security and business strategy while informing decision-making across its cyber risk management. With multiple geographies and business units, a global facilities services company needed to better understand and manage its cyber risk, which had become a top priority for its Board.

#SAMPLE SECURITY ASSESSMENT PROPOSAL SERIES#

Implemented a series of crisis management simulation trainings to help improve control areas that had a low maturity ratingДЇacilitating a facilities business understanding of its cyber risk.

Activated a cyber insurance solution with broad coverage.

Gained a clearer understanding of the overall cyber risk exposures supported by data and analytics.

Within 10 days, our cyber risk consultants compiled a custom CyQu report with prioritized recommendations and risk transfer strategies for the business based upon the retailerвЂ™s responses, and retailer was then able to complete our short insurance proposal form and receive a competitive cyber insurance quote. The retailer wanted to understand its current cyber exposure вЂ“ gaining an external opinion on its current cyber risk maturity position вЂ“ while identifying methods that could help mitigate its exposures and underpin its insurance-placing process with data insights.ДЄon provided the retailer with access to its online cyber risk assessment (CyQu) and received a first cyber risk maturity score within 90 minutes of completion. And the insurance manager who sat on the audit committee, that supervised risk mitigation activity, did not understand cyber risk.

There were constraints for key stakeholders from the IT and cyber security functions. Retail business shops for help in managing its cyber unknownsДЄ UK retailer struggled to have a clear insight into its cyber exposure. CyQu Enterprise scores and benchmarks across 9 security domains which break down into 35 critical control areas.

Sample security assessment proposal