The Security Risk Assessment Handbook, 2nd Edition

370  ◾  The Security Risk Assessment Handbook

© 2011 by Taylor & Francis Group, LLC

Various techniques exist for using judgment to reduce uncertainty. ese include

the Delphi technique, a decision-making process that polls experts individually and

gradually works toward a group consensus, and bounding the problem:

◾ Bounding the Problem—When attempting to determine security risk com-

ponent factors through the use of judgment, it is useful to rst bound the

problem with best- and worst-case scenarios. e team developing the values

should use reasonableness when considering the best and worst cases.

◾ Develop a Probability Distribution—Once the ...