An Attempt to Structure Risk Assessment

Paper in proceeding, 2012

We propose a security Risk Assessment process model which details the steps in the Risk Assessment process, such as resources used for Risk Assessment, actions performed on these resources, input data gained by these actions, risk evaluation methods applied and finally the output produced. The model highlights different paths that can be taken in RA methods, some issues with the existing methods and potential areas for development of new methods.