27
4
riSk aSSeSSment
and Security SurveyS
TOM WOODALL AND BOBBY RICKS
Assessing and Managing Risk
Risk is the possible outcome that may cause a negative impact on an
organization, impeding its ability to accomplish its mission or goals.
A negative impact can be as simple as the theft of materials or as
complex as a scheme involving industrial espionage. ere is a dif-
ference between risk assessment and managing risk; risk assessments
are conducted by security professionals, and risk is managed by senior
management. It is the job of the security professional to evaluate all
potential risks.
Risk assessments evaluate potential impact from man-made or
natural acts, ranging from crimes against persons or property to
earthquakes or tornados. Risk ass ...