Risk assessments

TRICK Service offers a unique way to conduct quantitative and qualitative risk assessments at the same time, within the same analysis.

You do not have to decide between either of the two methodologies to conduct your risk analysis. Of course, you can switch at any time to a purely quantitative, or a purely qualitative one.

Dynamic risk

Turn your risk analysis into a real-time monitoring tool that supports incident management.

TRICK Service is bundled with an API that accepts real-time risk information. If you have a security incident event management (SIEM), an intrusion detection system (IDS), a firewall, or similar, then why not connect them to your risk analysis, and see the impact of incidents in real-time?

Assets

Maintain your high-level inventory, supervise the asset owners, and manage the risks associated to them – all in one platform.

TRICK Service does not only provide you with an easy way of organise your assets. It also enables you to use it throughout the risk management process – including risk estimation, risk treatment, and reporting.

Integration with ticket­ing systems

TRICK Service provides in-built support for integrating with common ticket management systems (Redmine, JIRA).

That way, your risk treatment plan can directly be encoded in your own, dedicated tool – either by creating new tickets, or by linking actions to existing tickets.

Reports

Consolidate and summarise all your work in one single Word report that is ready to be presented to auditors or top management.

TRICK Service goes beyond being a risk management tool, and provides you a valuable support for proving compliance or setting up an ISMS in form of printable reports.

This includes a statement of applicability for ISO 27001 certification, risk sheets for CSSF circular 12/544, a DPIA report for GDPR, and a full report of your risk analysis.

Graphs

Clearly understandable graphs help you to identify your current risk level at first sight.

A picture is worth a thousand words; that's why TRICK Service includes several graphs, covering ISO compliance, risk level, profitability and risk evolution.

Those graphs can also be exported, so that you can further fine-tune them (in Excel), or use them in your own report or presentation.

Security

Fully control who can read, modify, or export individual risk analyses and versions.

For improved security, TRICK Service also supports Two-Factor Authentication, and integration with LDAP.

TRICK Service uses the latest security mechanisms to protect your data, and undergoes a regular penetration test.

Versioning

Collaborate with your colleagues, create copies, and archive your work.

All risk analyses created with TRICK Service have full versioning support. This allows you (or your co-workers) to create snapshots of the risk management process, increasing transparency and clarity of your work.

Risk analysis can be ex- and imported at any time – be it for back-up or archiving purposes, or for sharing your work with third parties.

Open Source

Use the open source version of TRICK Service for your Risk assessment and the DRAW tool to create the related asset dependency graphs.

Open TRICK is the open source version of TRICK Service, a full-featured risk management tool, assisting you in assessing risk, planning actions, and running your information security management system (ISMS). In difference to the full version, it does not contain access management, expert knowledge such as controls already imported from standards, but still allows users to import such elements by themselves and to import previous assessments.

DRAW is an open-source javacript tool assisting to create dependency graphs with propagation rate, to export them as JSON or PNG, and to synchronize asset lists and risk parameters with TRICK with these graphs.