Re: Vulnerability vs. Risk Assessments

[Scott Koger <skoger () EMAIL WCU EDU>]

I would suggest RFC 2828 for a formal definition - Internet Security Glossary
http://www.ietf.org/rfc/rfc2828.txt


On 11/4/09 9:03 PM, "Chris Kidd" <chris.kidd () UTAH EDU> wrote:

I'm having a hard time articulating the difference between these two types of assessments, so I'm hoping someone can 
clearly define them. Any thoughts are appreciated.

Thanks,
Chris

Chris Kidd
Chief Information Security and Privacy Officer
The University of Utah
650 Komas Drive, Suite 102
Salt Lake City, UT 84108
Office: 801.587.9241
Cell: 801.747.9028
chris.kidd () utah edu

http://www.secureit.utah.edu