Measuring and Managing Information Risk

Chapter 10

Common Mistakes

Abstract

In this chapter, the authors review some of the common problems experienced and mistakes that occur when conducting FAIR analyses. Specifically, this chapter covers five main categories of mistakes: checking results, scoping, data, variable confusion, and vulnerability analysis. Checking results covers the things that need to be done in order to ensure that the analysis results make sense in the greater context of the organization. Scoping covers four subcategories: analysis depth, analysis breadth, misalignment with purpose, and shifting scope in mid-analysis. Techniques for dealing with these four items are also reviewed. Data quality and estimation is covered, along with mistaking one variable for another is ...