Directory of business continuity planning and
|Directory of Software & Services for Business Impact Analysis and Disaster Recovery|
USING THE ABOVE MODEL WE CAN BEGIN TO MEASURE AND QUANTIFY.
FOR INSTANCE: VULNERABILITY v CONTROL
A significant vulnerability with no or little control in place to address it is bound to increase the risk of a successful attack. Conversely, low vulnerability and substantial control will reduce the risk of successful attack.
If the IMPACT is always going to be LOW, then substantial control may NOT be necessary or desirable, and may signify overspend. This is one of the reasons why ALL the elements in the model must be integrated into your risk analysis approach (some techniques do not provide full linkage with impact).
THIS IS NOT TRIVIAL TO ACHIEVE... BUT IF YOU CAN ACHIEVE IT, THE BENEFITS ARE SUBSTANTIAL
Return to Risk Analysis Page
HOME ~ WEBLINKS ~ CONTACTS
==> SOFTWARE DOWNLOAD AREA <==
Copyright © 1993-2002