Information Security Risk Assessment Toolkit

Chapter 5

Information Security Risk Assessment: Risk Assessment

Information in this chapter:

• System Risk Analysis

• Organizational/Strategic Risk Analysis

Introduction

So, we have collected the data in our data collection phase and we have structured the data in the data analysis phase. At this point you may be asking yourself, “What is the difference between the previous phase of the process and this one?” The fundamental difference is that the data analysis phase deals with structuring and organizing the data that was collected. Think of it as putting unstructured data, like a survey, into an organized format, such as a table. This phase is really focused on going through the organized data and interpreting it in order to derive and support ...