WIRELESS & MOBILE DEVICE SECURITY Third Edition, 3rd Edition

Risk Assessment

Before diving into a risk assessment, it’s critical to define risk itself. Risk can be generally stated as the possibility of experiencing an adverse or unwelcome outcome. Stated from an organizational point of view, risk is all the uncertainty that could possibly interfere with the organization’s objectives. This includes more than just things that might go wrong; it also includes unexpected events or circumstances that could impact an organization’s goals. These negative impacts can include uncertainty about positive project outcomes, financial loss including the loss of intellectual property, or the negative effects of a ransomware attack, and damage to the organization’s reputation.

Managing risk is a straightforward process ...