2020 -Assets Based Risk Assessment under ISO 27001:2013 

Thank you sanjay, your video is more understandable, when ever I used to get doubt I will watch your videos.

Thank you very much for knowledge sharing. This is talking about perfect timing for me.

I saw many videos sir, but u explained it very clearly.... Thank you so much

Really good one, and useful even basics will get clear , particularly for professionals who are running mfg companies and infrastructure companies .

Thank you so much for these wonderful sessions, sir. Kindly do post more on GRC based sessions. Keep posting some real time practical kind of stuffs if possible. Eagerly waiting for upcoming videos.

11 new controls introduced in the ISO 27001 2022 revision: A.5.7 Threat intelligence A.5.23 Information security for use of cloud services A.5.30 ICT readiness for business continuity A.7.4 Physical security monitoring A.8.9 Configuration management A.8.10 Information deletion A.8.11 Data masking A.8.12 Data leakage prevention A.8.16 Monitoring activities A.8.23 Web filtering A.8.28 Secure coding

Thank you so much Sir. I really learned a lot about RA on Assets today. I have subscribed your channel and planning to spend lots of time and watch all your videos on BC stuff. Love from Canada

This was very insightful. Really appreciate the efforts taken to explain this concept.

Content covered is quite useful for both beginners and experts in the Industry, great delivery. The background music is a little disturbing.

Simple and effective presentation of the concept. Thank you for sharing.

Thanks for sharing. The content was really good and well-presented.

Great thanks for this wonderful practical session of RA.

Very Informative and Valuable Sir Thank you for sharing Valuable Knowledge 🙏

good content sir. I have watched it several times.

Nicely explained.. thank you sir

You have made it look very simple. Thank you.

Thanks you soo much sir for sharing knowledge

Good intro and very useful

Very nice and learning this session. Thanks you Sir.

Excellent work, Sir; I appreciate your efforts

sir, you should example like what are corrective controls, detective controls etc. just reading from the slides don't help much

Highly appreciate the simplification

risk level didvided in 4 equal parts, if impact is medium and likelihood is medium then with this table final risk come in low number. same if high impact and high likelihood then risk result come in medium block. how you can explain this

Sorry, I'm Italian but I don't understand much of what you say. You have a strong Indian accent. You should post subtitles.

Very well done 👍

Critical concepts made simpler

Simple and to the Point, very well explained.

Great work sir

Nicely explained sir. Thankyou so much for such a clear and nice contents. Sir could you please also make a video on CIA rating criteria, I mean how to decide 1~4 rating for Credibility, Integrity and availability?

👍👍👍

Hello Sanjay, thanks for this great resource. Please I have a question. My question is; in the table below, I have various threat values for assetname "Laptop" and again had various threat values for assetname "Database server". In this situation, which of the threat values should I take as the actual threat value for a specific (single) asset? Assetname Threats Frequency Impact Value Threat Threat Value Laptop Virus & malware 4 4 16 4 Data & information theft 4 4 16 4 vandalism 3 3 9 3 unauthorized access 1 2 2 1 Ransomware 2 2 4 1 Date deletion 1 3 3 1 Database server Sql injection 3 4 12 3 Virus & malware 4 4 16 4 Data & information theft 4 4 16 4 vandalism 3 3 9 3 unauthorized access 1 2 2 1 Ransomware 2 2 4 1 Date deletion 1 3 3 1

Interesting Video..!!

Sir, request if you could also make a video based on Context. Normally, it is called as Context Based Risk Assessment. Thanks

who will decide asset value is it data owner / asset owner or auditor/implementer ?

How to compute vulnerability?

Hi everybody, i dont get the result of probability × impact value can become 4.

is it okay to use -> Asset + Threat + Vulnerability = Risk

Where is the impact section goes ?

Background noise is very disturbing...

Risk matrices don't work, this is a well established fact. What's the point of promoting it if you don't understand it?

Sir pl avoid background music

Chhan