Risk analysis

Risk analysis

1) What are the objectives and goals of performing a risk analysis on infrastructure and security protection?

The most the objectives and goals of performing a risk analysis is to construct, improve and develop the security protection of information systems. Analysis of current trends in the field of security of information and communication systems of the state and special shows that by increasing their protection is to identify potential threats and vulnerabilities of information, the number is growing.

The current regulatory framework in the area of ??information security (IS) points directly to the need for continuous assessment of the potential manifestations of threat and vulnerability information in the information and communication systems for the organization of targeted actions to minimize them and elimination. International community of experts made the act as process management (management) information security, and the procedures of analysis and evaluation of these factors - as a risk management of information security.

2) What is the target audience for whom you are performing a risk analysis?

Our target audience is companies and employees of companies.

3) List the steps necessary for performing a risk analysis.

Risk analysis is the process managers use to examine the threats facing their IT assets and the vulnerabilities of those assets to the risks (see Figure 1). Risk analysis consists of identifying IT assets, identifying threats to those assets, and determining the vulnerability of asset(s) to threat(s).

Regardless of the methodology used, it should have certain desirable properties. First, it should be acceptable to management, the user community, and the information systems department. Second, even though no single risk analysis methodology can consider all risks, it should be as comprehensive as possible, and be able to handle new technologies. Third, it should be logically sound. Fourth, it should be practical meaning, that it should deliver optimum protection for ihe ...