Problem
1. Which of the four approaches for identifying and mitigating IT risks does [ISO13335] suggest is the most cost effective for most organizations?
2. List the steps in the detailed security risk analysis process.
3. Define asset, control, threat, risk, and vulnerability.