A Value Based Security Risk Assessment Method

摘要

Risk assessment is an important and complicated part of information security, which is related to many fields of factors, and economic value is one of them. Using an efficient and useful method, this paper provides an economic value based risk assessment framework which can combine different security risks and assets value info, and then evaluate the ROI of information security investment.