Theoretical Approaches to Estimate the Information Security Risks
Theoretical Approaches to Estimate the Information Security Risks

Summary/Abstract: The risk analysis aims to assess relationships between assets, threats, vulnerabilities and security measures to determine potential losses. However, tools for risk analysis should be thoroughly checked to meet the managerial decisions. This article presents the implications and challenges of using quantitative and qualitative methodologies for assessing information security risks for control. The results show that the quantitative information is expressed more easily understandable by people with marginal training in related areas of information technology.

• Details
• Contents