A01 chaf6542 06 se fm indd

Understand Your Risk (Information Risk Management Regime)

● 

Decide who on your board (or senior manager in your company if you have no board) 

is responsible for managing the risk. Work out how much risk you face and how much 

risk you want to take. The IASME  self-  assessment questionnaire can help you do this. 

If you would like to be sent this questionnaire free of charge then please contact us.

● 

Identify your most valuable information in the company and mark documents con-

taining this data clearly as ‘confidential’ or similar.

● 

Create a Security Policy describing what you want to do to manage the risk and 

include all the steps here. Distribute the Policy to your staff. Review the Policy regu-

larly to ensure it meets your needs.

● 

Allocate security responsibilities clearly to other staff and ensure staff understand the 

importance.