Software Quality Assurance

171

8

risk, vulnerability, and

threat ManageMent

Introduction

is chapter, as the name implies, deals with the conceptual aspects

of risk, vulnerability, and threat management. ere are three parts

and two appendices in this chapter. Part 1 discusses about identifying

potential risks, Part 2 discusses how to analyze and assess the level

of risk. It also discusses the effective method to identify risks; risk

response strategy; mitigation and contingency plan; and vulnerabil-

ity, risk, and threat analysis. Part 3 provides a comparative analysis

between OCTAVE methods of risk management and other method-

ologies. e two appendices discuss sample documents of vulnerability

and risk assessment and risk factors assumptions.

Part 1: Risk Management

Risk ...