The process of identifying, estimating, and prioritising information security risks to organisational operations and assets.
No relationships mapped yet.
National Institute of Standards and Technology. (2012). Guide for Conducting Risk Assessments (NIST SP 800-30 Rev. 1). U.S. Department of Commerce.