Tidal Control incident
Performing a risk assessment: methods, models and tools
Resolved on July 24, 2026.
A risk assessment maps what can go wrong, how likely that is, and how serious the consequences would be, then determines how to respond. Risk is calculated as likelihood multiplied by impact, producing a score that guides treatment: mitigate, accept, transfer or avoid. ISO 27001 makes this process explicitly mandatory, while NIS2 and DORA impose comparable requirements. The assessment must be reviewed at least annually and after significant organisational changes, not treated as a one-off document.
Update timeline
- resolved Jul 24, 2026, 09:33 AM UTC
A risk assessment maps what can go wrong, how likely that is, and how serious the consequences would be, then determines how to respond. Risk is calculated as likelihood multiplied by impact, producing a score that guides treatment: mitigate, accept, transfer or avoid. ISO 27001 makes this process explicitly mandatory, while NIS2 and DORA impose comparable requirements. The assessment must be reviewed at least annually and after significant organisational changes, not treated as a one-off document.
Your product runs on more than Tidal Control
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services