"The process has been excellent in gaining a common understanding of risk. It would bring a lot of value to our company."
"The Citicus tool has been invaluable to the success of our BS7799 certification project, and will be fundamental in continual maintenance of the standard and the management of information security in general. The regular reconfirmation of asset valuation by the asset owners was particularly useful in providing evidence of buy-in from the business, in addition the use of the in-built auditing data and resulting reports enabled [recent major customer] to demonstrate evidence of continual improvement and provide visibility of information security risks to senior management."