Information Security Risk Analysis

• Evaluate tangible and intangible risks
• Use the qualitative risk analysis process
• Identify elements that make up a strong Business Impact Analysis
• Conduct risk analysis with confidence Management looks to you, its information security professional, to provide a process that allows for the systematic review of risk, threats, hazards, and concerns, and to provide cost-effective measures to lower risk to an acceptable level.

Contents

• Effective Risk Analysis
• Introduction
• Frequently Asked questions about risk analyis
• Risk Analysis as Part of a Quality Assuarce Program
• Risk management Quality Assurance Requires Identification of Information as an Enterprise Asset
• Standard Risk Analysis Methodology
• Risk Management Objectives
• Which Risk Analysis Process is Best?
• Definitions
• Qualitative Risk Analysis
• Introduction
• Overview
• Qualitative Risk Analysis - The Theory
• Qualitative Risk Analysis: Another Approach
• The "30-Minute" Risk Analysis
• Conclusion
• Value Analysis
• Introduction
• Properties of Information Security Value Analysis
• Purpose of Assigning Value to Assets
• Why Value Assets?
• Generally Accepted Accounting Principles (GAAP)
• Paralysis By Analysis
• Conclusion
• Other Qualitative Methods
• Introduction
• Vulnerability Analysis
• Hazard Impact Analysis
• Threat Analysis
• Questionnaires
• Single Time Loss Algrothym
• Conclusion
• Facilitated Risk Analysis Process (FRAP)
• Introduction
• Facilitated Risk Analysis Process (FRAP) Overview
• Why the Need for FRAP
• Conclusion
• Other Uses of Qualitative Risk Analysis
• Introduction
• Impact analysis
• Application Pre-Screening
• Business Impact Analysis
• Conclusion
• Appendix
• Index