Establishing Enterprise ICT Risk Management
A large Nordic specialist bank needed an ICT risk management function. NCG set it up, writing the processes and guidelines and running risk assessments across the organization, while helping the CISO drive the year's priority cybersecurity initiatives.
Client Overview
Challenges Faced By Client
Supervisors expect banks to manage ICT risk as a defined function with documented processes. The bank needed to build that capability while keeping its security roadmap moving.
- No dedicated ICT risk management function
- ICT risk processes and guidelines not documented
- Risk assessments not run consistently across the organization
- CISO capacity stretched across many priorities
How NCG Helped
Build the function, run the first cycle, support the CISO.
ICT risk function set-up
Established the ICT risk management function, its role and its interfaces with the business.
Processes and guidelines
Wrote the processes and guidelines for identifying, assessing and reporting ICT risk.
Organization-wide risk assessments
Ran risk assessments across the organization using the new method.
CISO support
Helped the CISO drive the prioritised cybersecurity initiatives for the year.
Solutions Implemented By NCG
An operating ICT risk function and a cybersecurity plan that kept moving.
- ICT risk management function
- ICT risk processes and guidelines
- Organization-wide risk assessments
- Cybersecurity initiative support
