TY - RPRT
KW - context
KW - Risk
KW - risk management
KW - risk profile assessment
KW - Scenario
AU - Venelin Georgiev
AB - The risk assessment/management concept is widely used in security research due to its universality, but also because of the active nature and sense of precautionary management, implemented on its basis. The security risk profile can be described and studied at different levels of security, which poses the question how researchers should choose the appropriate model for identifying, evaluating and developing strategies to mitigate the risk. The article raises the question whether the use risk profiles for the purposes of policy formulation, at one level of security, and capacity building at another, can introduce errors in decision making. As a possible tool to eliminate such errors the author proposes the use of a two-stage model for the description and study of the risk profile, which includes a contextual and a specific level of the discourse.
BT - IT4Sec Reports
CY - Sofia
DA - June 2015
LA - eng
M1 - 129
N2 - The risk assessment/management concept is widely used in security research due to its universality, but also because of the active nature and sense of precautionary management, implemented on its basis. The security risk profile can be described and studied at different levels of security, which poses the question how researchers should choose the appropriate model for identifying, evaluating and developing strategies to mitigate the risk. The article raises the question whether the use risk profiles for the purposes of policy formulation, at one level of security, and capacity building at another, can introduce errors in decision making. As a possible tool to eliminate such errors the author proposes the use of a two-stage model for the description and study of the risk profile, which includes a contextual and a specific level of the discourse.
PB - Institute of Information and Communication Technologies
PP - Sofia
PY - 2015
T2 - IT4Sec Reports
TI - A Two-Level Model for Describing the Risk Profile in Formulating Policy and Developing Security Capabilities
ER -