hlss3 Yhtomit

1.  Discuss what is meant by "acceptable risk" in determining a risk management plan relating to critical infrastructure, and how the level of acceptable risk may differ among stakeholders.

2.  What critical infrastructure protection-related decisions might a risk assessment support? (examples include protective measures, facilities placement, response capabilities, etc.)

3.  How do the Government Accountability Office (GAO) and the 2013 National Infrastructure Protection Plan (NIPP) risk frameworks differ?

2 Pages

APA Format

3 sources

Fishchoff, B., Watson, S., & Hope, C. (1984). Defining risk. Policy Sciences, 17, 123-129. Retrieved from http://sds.hss.cmu.edu/risk/articles/definingrisk.pdf

Risk Assessment Methodologies for Critical Infrastructure Protection Part 1: State of the Art. Retrieved from http://ec.europa.eu/dgs/home-affairs/e-library/docs/pdf/ra_ver2_en.pdf

Moteff, J. (2008). Critical Infrastructure Protection: Background, Policy and Implementation. Retrieved from http://www.fas.org/sgp/crs/homesec/RL30153.pdf.

Congressional Research Service. (2002, August 20). What Makes Infrastructure Critical? Retrieved from http://www.libertysecurity.org/IMG/pdf/CRS_Report_-What_makes_an_Infrastructure_Critical_-_30.08.2002.pdf

NIPP, pp. 27-69.  Retrieved from http://www.dhs.gov/xlibrary/assets/NIPP_Plan.pdf