The Security Risk Assessment Handbook, 2nd Edition

Security Risk Assessment Preparation  ◾  103

© 2011 by Taylor & Francis Group, LLC

Washington state should consider the threat statement reasonable and thus include

it. In fact the security risk assessment team should consider a variety of factors when

determining the validity of possible threat statements.

◾ History—It is hard to argue against the history of an organization. If con-

sidering whether or not it is likely that an executive laptop would ever be

misplaced or stolen, simply ask the assessment sponsor if there is any history

of this having occurred. If so, then a threat statement concerning the loss of

an executive laptop is certainly valid. (Of course, it may be valid even if there

is no history of it having happened.)

◾ Environmenta ...