Risk analysis is one way to monitor security in an organization.
Risk analysis can be a time- consuming process; it involves a
number
of steps, some of which require “educated guessing.” Nevertheless,
the process alone raises awareness of security issues even if no
immediate actions are taken as a result. The steps are:
i. Identify assets (infrastructure, people, hardware, software,
reputation, etc.).
For the rest of this list, we’ll concentrate on a single
asset.
ii. Determine vulnerability (what event or...