The Security Risk Assessment Handbook, 3rd Edition

2 Information Security Risk Assessment Basics

It is the aim of this book to provide an extensive discussion of the elements and performance of an information security risk assessment. As such, you will find detailed information, discussion, and advice on all elements of the security risk assessment. Many of the sections of this book will provide a rather detailed discussion of a single element of security risk assessment. However, before we get into this level of discussion, it would be useful to provide a brief overview of the security risk assessment process.

For the purposes of this book, the security risk assessment process is defined as follows:

Security Risk Assessment—An objective analysis of the effectiveness of the current security ...