Second Edition of the Security Risk Management Aide-Mémoire

Business Impact Levels

Business impact levels (BILs) measure the potential impact a disruption or loss of a particular business function or asset would have on...

When to use a Risk Matrix

Risk matrices can be used effectively based on thorough hazard/threat assessments and asset analyses. These inputs can provide...

Finding software for risk management

One of the things that I do is build software. These days, I'm more of an end user, and for the past few years, I've been a bit selfish...

Choosing a Risk Assessment Tool

For most of us, Microsoft Excel has been the default starting point for risk assessment tools. There is, however, an ever-increasing...

Security Risk Management Models

Some key models that can be helpful for security risk assessment and management, depending on the context, include the following. The...

Three Types of Risk

Risk management comes in many forms, but one approach, which I call the 3As, looks at three different risk management styles: Actuarial -...