Interactions and Comparison of It Risk Analysis Methods

Holistic Security and Risk Intelligence: Are Current Risk Management Methods Leading to Breach?

“…Each organisation's risk appetite is different, as are the individual models and controls chosen. While organisations may struggle to mitigate risk cost effectively, it is suggested that whatever risk methods are used, a focus on data collection and preparation is essential to ensure the quality of information before conducting risk assessment [10].…”

“…Table II gives a summary of the above information extracted from comparison of risk management frameworks [10]- [14]. The comparison of risk management models is dependent on the criteria used within reviews and several models have different versions or implementations suited to respective organisation size and resource.…”

“…Some aspects can be abstract and require significant expertise and interpretation. It includes some definition of relationships and dependencies [10]. However, it is dependant on its own unique terminology for risk management, and it adopts the risk assessment methods of AS/NZS 4360 general risk management standard, which does not specialise in information security [15].…”

Holistic Security and Risk Intelligence: Are Current Risk Management Methods Leading to Breach?

“…Is a mostly qualitative method, requiring input from managers and experts, while aligning to ISO 27002 controls [10] and for the implementation of ISO 27005 [13].…”

Realizando una Revisión Sistemática de Metodologías ISRA orientadas a la Seguridad TIC. Periodo 2014-2019

“…Actualmente se están realizando muchas investigaciones sobre análisis de riesgos, y muchas de ellas intentan comparar los métodos clásicos para ver cómo se podrían alinear [13][14][15][16][17][18][19]. Otros investigadores han realizado también algunos análisis comparativos de los principales estándares de riesgos con el objetivo de mejorar algunos de sus aspectos -entre ellos podemos destacar [20], o trabajos que relacionan los planes de contingencia con el análisis de riesgos [21].…”