Security in Computing, Third Edition

8.6. Terms and Concepts

security plan, 493	Risk analysis, 506
policy, 493	Risk impact, 506
requirement, 495	problem, 506
constraint, 495	avoided risk, 506
control, 495	transferred risk, 506
requirement qualities:	assumed risk, 506
correctness, 496 consistency, 496 realism, 496 need, 496 verifiability, 496 traceability, 496 schedule, 497 plan review, 498 plan timetable, 498	Risk leverage, 507 assets: hardware, 509 software, 509 data, 509 documentation, 509 supplies, 509 infrastructure, 509 human assets, 509
security planning team, 499 management commitment to security plan, 499	Hazard and operability studies (HAZOP), 510 fault tree analysis (FTA), 510
business continuity plan, 500 incident response plan, 503	failure modes and effects analysis (FMEA), 510
attributes contributing ...