Risk Assessment Frameworks Notes

Understanding Risk Assessment Frameworks

  • Definition: Risk assessment frameworks provide structured methods for conducting thorough evaluations of security risks.
    • Examples include NIST SP800-30 and FAIR.

NIST SP800-30 Framework

  • Key Steps:
    1. Risk Identification
    2. Risk Analysis
    3. Risk Evaluation
    4. Risk Treatment
  • True Statement: The NIST SP800-30 framework is accurate in defining risk management steps.