
2 Managing Network Vulnerability Assessment
A risk analysis also lets an enterprise take control of its own destiny. With
an effective risk analysis process in place, only those controls and safeguards
that are actually needed will be implemented. An enterprise will never again
face having to implement a mandated control to “be in compliance with audit
requirements.”
A risk analysis should be conducted whenever money or resources are to
be spent. Before starting a task, project, or development cycle, an enterprise
should conduct an analysis of the need for the project. Understanding the
concepts of risk analysis and applying them to the business needs ...