RISK ANALYSIS

Risk analysis consists of two major parts :

• Risk-identification
• Risk-evaluation

• What/Who needs to be protected against what forms of aggression ?

Because not all risks are equally important, they need to be arranged in order of their importance.  The expected losses are the criteria that are used by most companies for this classification.  Some companies will use the frequency of aggressions as the evaluation criterion.

SCOPE pays a lot of attention to these questions because the answers provide the foundation for all further steps in the security process.  This risk analysis forms the basis for all investments and decisions.