INTERACTIONS AND COMPARISON OF IT RISK ANALYSIS METHODS

IT Risk analysis is a crucial mechanism in the wheel of Information Security Management. It is important for enterprise to adopt a systematic and well-structured process for assessing IT risks. Currently a several risk analysis methods are available to assess and monitor risks. However most IT organizations still suffering with the wrong choice which can causes a waste of money, resources and time. This is, mainly due to the to lack of IT risk management knowledge, or the shortcomings with comparison-making tools which are essential for getting an anticipated overview. The first aim of this study is to provide a deep understanding of IT risk analysis process, interactions and the effectiveness of information gathered before risk analysis can be conducted. The second aim is to provide a classification of IT risk analysis methods based on their features and Stamp scheme criteria. Finally, we discuss the different results in order to build an efficient comparative study.