Threat Assessment and Risk Analysis

2

What is Risk?

Rachel Derr

Abstract

In this chapter, you will learn that security in any system should be commensurate with its risks. However, the process to determine which security controls are appropriate and cost effective is quite often a complex and sometimes a subjective matter. One of the prime functions of security risk analysis is to put this process into a more objective basis. Risk management is a process used to implement security measures to reduce risks to a reasonable and acceptable level. Every organization should have some form of risk management in place to adequately protect its assets. Risk management studies the risk, vulnerabilities, and threats to any asset that an organization faces. Risk management can be used to ...