Methods and apparatus, including computer program products, for risk assessment and analysis In one general aspect, asset data representing a set of assets is received, the asset data includes a respective value for each asset in the set of assets having a value. Threat data representing a set of threats is received; each threat in the set of threats potentially reduces the value of one or more of the assets in the set of assets. Measures data representing a set of measures is received; each measure in the set of measures protects the value of one or more assets from one or more threats. Assessment data representing one or more assessments is received; each assessment rates one or more measures. An implementation level for each measure is calculated based upon the assessment data.
展开▼
