Information Security A Practical Guide: Bridging the Gap between IT and Management

CHAPTER 5: QUICK AND DIRTY RISK ASSESSMENT

Chapter Overview

There are many risk assessment processes, but many are long and overly complicated. More and more organisations are moving to a more agile working environment, developing systems iteratively, changing functionality to meet the users’ requirements. This sort of working can make it very difficult to follow a complex risk management process. Traditionally these processes have been written favouring a waterfall development methodology.

In the modern digital age organisations need to be flexible to take advantage of opportunities as they present themselves. Depending on the organisation’s culture and risk appetite the decision on whether to proceed with a new service may depend on the outcome ...