The Security Risk Assessment Handbook, 3rd Edition

4 Security Risk Assessment Preparation

Prior to the security risk assessment team’s arriving on-site at the customer location, there are a number of activities to be performed to ensure an efficient project. These activities include introducing the assessment team to the organization, obtaining permission for testing and data gathering, and reviewing available information.

4.1 Introduce the Team

The introduction of the security risk assessment team to the customer organization is important in establishing a good start for the project. Providing an introduction to the security risk assessment team, along with contact information and credentials of individual team members provides the customer confidence in the professionalism of the effort to ...