RM

1. The phases of a risk assessment are presented in the textbook and the Octave Allegro Methodology. List the phases for each methodology and then compare and contrast these phases.

Guide to comparing and contrasting http://writingcenter.unc.edu/handouts/comparing-and-contrasting/ (Links to an external site.)Links to an external site.

1. What factors are involved in determining the price for a security risk assessment?
2. Describe the three assessment methods used by assessors. When is it appropriate to use each method?
3. What are the various audiences for a security risk assessment report? What challenges are there in writing a report for these audiences? How can the challenges be overcome?
4. If you hired a firm to do a risk assessment of your business, would you hire the same firm to mitigate any risks that were identified? Why or why not?
5. Why is it necessary to establish boundaries for a risk assessment? Describe several different boundaries that might be established and why each of those boundaries would be established.
6. When performing an Octave Allegro risk assessment, what type of information assets should be considered in the assessment? What are some of the challenges in identifying those assets?