Set the baseline
Record the assets, controls and decisions included in the assessment.
S.A.F.E / Act & report
Keep assessments current as the environment changes.
Review changes in connected evidence and revisit risk decisions when assets or business conditions shift.
How it works
in S.A.F.E.
Risk monitoring within an enterprise security review.
Review changes
Identify updates to connected evidence and assessment inputs.
Reassess the risk
Route material changes back to the accountable reviewers.
In practice
A focused enterprise workflow.
A previously internal service becomes internet-facing. Reopen its assessment and ask the service owner to review exposure and control evidence before the next risk meeting.
More from S.A.F.E.
Keep related work connected across the assessment.
Make the next security decision with context.
Explore S.A.F.E around your enterprise’s assessment workflow.