Risk Assessment Techniques

Once you have a risk model established, you will need to choose different assessment methodologies that match the scope of your assessment. A risk assessment associated with a single project is going to require a different approach than an assessment of an entire other company that is being acquired. There will be the everyday assessments of newly announced vulnerabilities or quick assessments of the risks discovered during an active incident investigation. This chapter reviews the most common categories of assessments and offers the most effective way to approach each.