A conceptual model for computer security risk analysis

Risk analysis is required by a number of organizations to provide a basis for deciding which safeguards to implement to protect information systems. A variety of risk analysis techniques and tools have been developed. Each technique or tool is based, implicitly or explicitly, on a conceptual model of risk. The high-level conceptual model of disclosure risk for information systems used in the Analysis of Networked Systems Security Risks (ANSSR) prototype is presented.<
>