Re: Re: Risk Ranking...

[rrmorton () purdue edu]

NIST has some good special publications that define things for you... NIST sp pub-800-30

It's a good process for learning to do risk assessment.  There is no one way to do a risk assessment.  It is largely 
dependent on the situation, so I suggest working with some that are experienced in this area.  You might want to look 
up Hospitals or State Agencies such as DoH to look for CSO's or privacy compliance officers to get advice.

---------------------------------------------------------------------------
This list is sponsored by: ByteCrusher

Detect Malicious Web Content and Exploits in Real-Time.
Anti-Virus engines can't detect unknown or new threats.
LinkScanner can. Web surfing just became a whole lot safer.

http://www.explabs.com/staging/promotions/xern_lspro.asp?loc=sfmaildetect
---------------------------------------------------------------------------