top of page

SECURITY RISK MANAGEMENT AIDE-MÉMOIRE

Where can I get a copy?

WELCOME

The Security Risk Management Aide-Memoire (SRMAM) is a short book based on the Security Risk Management Body of Knowledge (SRMBOK) with additional material, new research, and changes to reflect the 2018 ISO31000 Risk Management Standard update. You can read most of the chapters in the blog articles below, plus new material that will form the basis for a second edition in the coming years.

I'd like a copy

Search

Business Impact Levels

Mar 7
2 min

Business Impact Levels

Business impact levels (BILs) measure the potential impact a disruption or loss of a particular business function or asset would have on...

246 views0 comments

When to use a Risk Matrix

Feb 7
2 min

When to use a Risk Matrix

Risk matrices can be used effectively based on thorough hazard/threat assessments and asset analyses. These inputs can provide...

332 views0 comments

Finding software for risk management

Jan 25
5 min

Finding software for risk management

One of the things that I do is build software. These days, I'm more of an end user, and for the past few years, I've been a bit selfish...

263 views0 comments

Choosing a Risk Assessment Tool

Jan 10
2 min

Choosing a Risk Assessment Tool

For most of us, Microsoft Excel has been the default starting point for risk assessment tools. There is, however, an ever-increasing...

214 views0 comments

Security Risk Management Models

Dec 19, 2022
2 min

Security Risk Management Models

Some key models that can be helpful for security risk assessment and management, depending on the context, include the following. The...

582 views0 comments

Three Types of Risk

May 16, 2022
3 min

Three Types of Risk

Risk management comes in many forms, but one approach, which I call the 3As, looks at three different risk management styles: Actuarial -...

1,747 views1 comment

bottom of page