SYSTEMS AND METHODS FOR IDENTIFYING, CATEGORIZING, QUANTIFYING AND EVALUATING RISKS

摘要

Systems and methods for identifying, categorizing, quantifying and evaluating risks are presented In the present invention, an Asset can be analyzed into its various levels of sub-assets in a top-down manner In turn, lowest level sub-assets can be analyzed into components and elements of such components In exemplary embodiments of the present invention, comprehensive and orthogonal threat probability and vulnerability data can be input for each of the elements of each component of each lowest level sub-asset In exemplary embodiments of the present invention such data can be input in the form of a threat probability matrix and a vulnerability matrix The input data can then be processed to generate an output set for each such sub-asset comprising a combined threat/vulnerabihty matrix, an index of overall risk vulnerability, or 'Figure of Merit' (FOM) and associated retained risk