Performing the Risk Evaluation
摘要
This chapter addresses the calculation of risk. Risk is derived from the combination of the feasibility rating of the threat scenarios and the impact of the threat scenario actually occurring. We perform the mapping of asset-threat scenarios to damage scenarios and calculate the risk of each combination. We provide practical insights on how to adjust the risk matrix. We also show how statistical representations can be useful to better present and understand the key results of a TARA. Finally, we provide examples based on our three case studies.