Evaluating IT Risk
Last year, I wrote a blog called Classifying Risks, on my LinkedIn blog and over the last few days I found some notes that might add to what I said then.
How does one work out the importance of a risk and how much to spend on mitigation. Some of this article repeats what was said in the previous article.
In order to evaluate the annual loss expectancy of a risk, an estimate of its likelihood and impact…