Phân tích và Quản lý rủi ro

Security is about managing risk. Without an
understanding of the security risks to an
organization’s information assets, too many
or not enough resources might be used or
used in the wrong way.
Risk management also provides a basis for
valuing of information assets. By identifying
risk, you learn the value of particular types of
information and the value of the systems that
contain that information.