Risk Assessment
The National Institute of Technology Standards (NIST, 2012) defines risk assessment as “the process of identifying, estimating, and prioritizing risks to organizational operations (including mission, functions, image, reputation), organizational assets, individuals, other organizations, and the nation, resulting from the operation of an information system. Part of risk management incorporates threat and vulnerability analyses, and considers mitigations provided by security controls planned or in place.”
Also according to NIST, the purpose of risk assessments is to inform decision makers and support risk responses by identifying:
- relevant threats to organizations or threats directed through organizations against other organizations; ...
Get Wireless and Mobile Device Security, 2nd Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
