Risk analysis is an important information security process that is being applied by a steadily increasing number of organizations. The process is used to ensure that information systems assets are protected against accidental or deliberate damage, and against acts of God. This paper looks at the main requirements for a risk analysis method, at conflicts that arise from these requirements and at the reasons why risk analysis is a problematic discipline.
['Zbigniew Ciechanowicz']
Refereed paper: Risk analysis: requirements, conflicts and problems