Integrated model for the management of the complexity risk and resilience of secure information infrastructure

iGRC联盟于2011年12月15日推出了其综合动态风险管理运营能力。iGRCTM能力专注于保护关键的国家基础设施免受网络攻击，通过联盟的开放式治理，风险和合规性互操作性协议iGRCTM将Infogov领先的Proteus®企业信息安全管理系统与网络安全相关的传感器技术相结合。该演示是关于根据PCI DSS 2.0处理客户信用卡付款。使用了四种方案：（1）通过电子邮件披露信用卡付款详情，（2）未经授权访问系统，（3）未经授权更改可执行文件，以及（4）前雇员访问系统。Proteus iGRCTM功能提供了对风险状况的准确理解，同时提供：动态风险管理;对高影响低概率风险事件的保险;从ICT资产中获取安全情报;将风险操作与管理联系起来;利用现有传感器信息和验证风险评估。

The iGRC Consortium launched its integrated dynamic risk management operational capability on 15th December 2011. Focused on the protection of critical national infrastructure from cyber attack, the iGRCTM capability combines Infogov’s leading Proteus® Enterprise information security management system with network security related sensor technologies via the Consortium’s open governance, risk and compliance inter-operability protocol, iGRCTM. The demonstration was about handling customer credit card payments in accordance with PCI DSS 2.0. Four scenarios were used: (1) disclosure of card payment details via email, (2) unauthorised system access, (3) unauthorised changes to executable files and (4) system access by ex-employees. The Proteus iGRCTM capability provides accurate understanding of the risk profile, whilst providing: dynamic risk management; insurance for high impact low probability risk events; derivation of security intelligence from the ICT estate; linkage of risk operations to management; exploitation of existing sensor information and verification of risk assessments.