Risk Analysis: Ten Years On

Abstract

The need for security for the business user is all important these days especially as the trend is to distribute computing power in the user environment. Examines risk analysis of information security and its aim of placing risk exposures into perspective and providing a basis for comparing the risk exposure with the cost of the solution. Views two different approaches, qualitative and quantitative, based on the mixed influences of Dr Jerry FitzGerald′s matrix approach and Bob Courteney′s approximation scales. Assesses the strengths and weaknesses of the analysis.

Citation

Fitzgerald, K.J. (1993), "Risk Analysis: Ten Years On", Information Management & Computer Security, Vol. 1 No. 5. https://doi.org/10.1108/09685229310048328