top of page

SECURITY RISK MANAGEMENT AIDE-MÉMOIRE

Where can I get a copy?

WELCOME

The Security Risk Management Aide-Memoire (SRMAM) is a short book based on the Security Risk Management Body of Knowledge (SRMBOK) with additional material, new research, and changes to reflect the 2018 ISO31000 Risk Management Standard update. You can read most of the chapters in the blog articles below, plus new material that will form the basis for a second edition in the coming years.

I'd like a copy

Search

Business Impact Levels

Business Impact Levels

Business Impact Levels

Business impact levels (BILs) measure the potential impact a disruption or loss of a particular business function or asset would have on...

Mar 7, 20232 min read

When to use a Risk Matrix

When to use a Risk Matrix

When to use a Risk Matrix

Risk matrices can be used effectively based on thorough hazard/threat assessments and asset analyses. These inputs can provide...

Feb 7, 20232 min read

Finding software for risk management

Finding software for risk management

Finding software for risk management

One of the things that I do is build software. These days, I'm more of an end user, and for the past few years, I've been a bit selfish...

Jan 25, 20235 min read

Choosing a Risk Assessment Tool

Choosing a Risk Assessment Tool

Choosing a Risk Assessment Tool

For most of us, Microsoft Excel has been the default starting point for risk assessment tools. There is, however, an ever-increasing...

Jan 10, 20232 min read

Security Risk Management Models

Security Risk Management Models

Security Risk Management Models

Some key models that can be helpful for security risk assessment and management, depending on the context, include the following. The...

Dec 19, 20222 min read

Three Types of Risk

Three Types of Risk

Three Types of Risk

Risk management comes in many forms, but one approach, which I call the 3As, looks at three different risk management styles: Actuarial -...

May 16, 20223 min read

bottom of page