ICT risk assessment at Irembo
Assessing ICT operations against ISO 27001 and NIST, and turning the gaps into corrective action plans.
Code available on request
Context
A platform that serves millions of citizens has to show that its operations meet recognised security and risk standards, and that gaps are found before they cause harm.
What I did
- Assess ICT operational practices against ISO 27001 and NIST.
- Recommend corrective action plans for the gaps found, written for the teams that own them.
- Bring the view from production operations into risk discussions: what fails, how often, and what it affects.
Result
An ongoing responsibility, carried out alongside my network operations role.