The Canvas Method

The Canvas Method for Information Security actively engages teams in risk identification and risk treatment.

This heightens risk awareness and responsible behaviour throughout the organisation, and enables teams to make the right cybersecurity decisions.

The Canvas Method helps internalise security policies and bridge the gap between compliance and business goals.

The Canvas Method maximises the effectiveness of your information security management by implementing risk ownership in business teams.

Organisations that adopt the Canvas Method experience a higher visibility on risks in business processes and stronger involvement of management and employees in information security.

Business teams are guided through the process of recognizing risks, defining mitigating actions, and establishing ownership in a series of three workshops.

This implements a PDCA cycle for continual improvement in every department.