General Information

Microsoft was founded in 1975 in the United States and is the undisputed world leader in personal and corporate software, offering an extensive line of products and services. Microsoft annually invests 6.9 million dollars in the development and integration of technologies that enable people and companies to reach their full potential, whether at home, at work or in society as a whole.

Project Scope

One of the services offered by Microsoft to clients and partners is the Microsoft Security Risk Assessment (MSRA), an assessment of security risks conducted by means of forms that support interviews and manual reports. Originally conducted within a two-week period, the MSRA has the participation of senior security professionals from partner companies (today, a select group of roughly 20 companies). In order to reduce the time and effort involved in the assessments, gain scalability for conducting assessments in a wider range of clients and enhance the quality standard of the service, Microsoft has decided to use Modulo Risk Manager, Modulo’s software program for risk assessment and management of information security knowledge. MSRA is a part of the Reliable Computing program, an initiative that aims to offer safe, private and reliable computing experiences.

• To automate the MSRA process, making it less susceptible to error;
• To standardize the execution of the service;
• To improve the quality of the final MSRA product for the client;
• To increate the scalability of MSRA, allowing it to be performed with a wider range of clients.

• Use of Modulo Risk Manager in the application of MSRA;
• Import of the Microsoft knowledge base needed for execution of the MSRA (checklists, Delivery Guide, calculation formulas and final product templates) to Risk Manager;
• Training of professionals from the partner group in the use of Modulo Risk Manager™.

• Automation of risk assessments;
• 50% reduction in the time needed for conducting assessments;
• Standardization of the final risk assessment reports;
• Improvement in the quality of the final product;
• Lower susceptibility to error;
• Reduction in the time needed for quality assurance by Microsoft;
• Reduction in personnel effort fewer people conducting assessments in less time and less quality assurance effort;
• Reduction in the cost of risk assessments, resulting from the decrease in the effort and time needed for conducting the service;
• Possibility to monitor security levels, by means of the standardization obtained;
• Expansion of the MSRA project in Brazil and in Latin America;
• Productivity gains;
• Economies of scale for execution in a larger number of clients;
• Ease and speed in the integration of Modulo Risk Manager with MSRA's objectives.