Security Risk Assessment the Steps Essay

The same does apply to security metrics such that these metrics establish the performance within the organization and the effectiveness of the organization's security.

The purpose of Risk Analysis is to spot and find security risks in the current framework and to resolve the risk exposure identified by the risk analysis. The type of security risk assessment for an organization is a function of a number of available assessments. However, the most important security protocol is to protect the organizations assets. Therefore, the most important security risk assessment for this purpose is the penetration testing proceeded by the vulnerability scan (Landoll, 2006). Protection of assets is of primary concern. Assets include both physical and non-physical assets. Non-physical assets are defined as assets that are not tangible. The Security Audit is indeed imperative, as is the Ad Hoc testing and Social Engineering test.

Annotated Bibliography

Campbell, G. (2010, What's state-of-the-art in security metrics? Security Technology Executive, 20(9), 19-19. Retrieved from http://search.proquest.com/docview/823012983?accountid=13044

Campbell (2010) delves into the newest technologies currently used in security technology.Contract security guards, he contests, account for more than $16 billion in the United States, employing more than public law enforcement. Campbell proposes musing metrics developed for the senior management team as well as providing a methodology on how to determine a particular metrics application.

Institute For Security And Open Methodologies (ISECOM) Security Metrics -- Attack Surface Metrics.

The ISECOM provides information regarding the rav and its application as a metric in security protection. The attack surface metric aspect is the focus of the metrics developed and is the specific activity of the rav.

Landoll D.J. 2006. The Security Risk Assessment Handbook. A Complete Guide for Performing Security Risk Assessments. Auerbach Publications

The Security Risk Assessment Handbook is a comprehensive manual that details the methodology and assessment approach to render a security risk analysis. Landoll's approach is to identify the layout and operation of the security system and the various methods to and approaches to identify risk and….....