Overview
- Shows a strong pragmatic orientation by explaining not only what security risk assessment is, but also how to do it
- Illustrates the various risk assessment tasks and how to conduct them using a running example
- Presents several typical challenges in risk analysis and how to deal with them
- Includes supplementary material: sn.pub/extras
Part of the book series: SpringerBriefs in Computer Science (BRIEFSCOMPUTER)
Access this book
Tax calculation will be finalised at checkout
Other ways to access
Table of contents (15 chapters)
-
Front Matter
-
Conceptual Introduction
-
Front Matter
-
-
Cyber-Risk Assessment Exemplified
-
Front Matter
-
-
Known Challenges and How to Address Them in Practice
-
Front Matter
-
-
Back Matter
Keywords
About this book
This book provides a brief and general introduction to cybersecurity and cyber-risk assessment. Not limited to a specific approach or technique, its focus is highly pragmatic and is based on established international standards (including ISO 31000) as well as industrial best practices. It explains how cyber-risk assessment should be conducted, which techniques should be used when, what the typical challenges and problems are, and how they should be addressed.
The content is divided into three parts. First, part I provides a conceptual introduction to the topic of risk management in general and to cybersecurity and cyber-risk management in particular. Next, part II presents the main stages of cyber-risk assessment from context establishment to risk treatment and acceptance, each illustrated by a running example. Finally, part III details four important challenges and how to reasonably deal with them in practice: risk measurement, risk scales, uncertainty, and low-frequency risks with high consequence.
The target audience is mainly practitioners and students who are interested in the fundamentals and basic principles and techniques of security risk assessment, as well as lecturers seeking teaching material. The book provides an overview of the cyber-risk assessment process, the tasks involved, and how to complete them in practice.
Authors and Affiliations
About the authors
Atle Refsdal is a senior research scientist at SINTEF ICT in Norway, where he is involved in international as well as national research projects. His research interests include formal specification and analysis, as well as model-based risk analysis. In addition to his academic background he also has several years of industrial experience from the fields of knowledge engineering and industrial automation.
Ketil Stølen has broad experience from basic research as well as applied research. He has led the development of the CORAS method since the very beginning and was the technical manager of the related EU-project. Since then, he has led several research projects funded by the Research Council of Norway which considerably refined and extended the original CORAS approach. A book on the CORAS method supported by a free tool was published in 2011.
Bjørnar Solhaug is a senior research scientist at SINTEF ICT in Norway. His research interests include risk and security management, threat and risk modelling, and formal/semi-formal techniques. He is one of the co-authors of the book on the CORAS approach to model-driven risk analysis (Springer 2011).
Bibliographic Information
Book Title: Cyber-Risk Management
Authors: Atle Refsdal, Bjørnar Solhaug, Ketil Stølen
Series Title: SpringerBriefs in Computer Science
DOI: https://doi.org/10.1007/978-3-319-23570-7
Publisher: Springer Cham
eBook Packages: Computer Science, Computer Science (R0)
Copyright Information: The Author(s) 2015
Softcover ISBN: 978-3-319-23569-1Published: 12 October 2015
eBook ISBN: 978-3-319-23570-7Published: 01 October 2015
Series ISSN: 2191-5768
Series E-ISSN: 2191-5776
Edition Number: 1
Number of Pages: XI, 145
Number of Illustrations: 32 b/w illustrations
Topics: Systems and Data Security, Quality Control, Reliability, Safety and Risk, Management of Computing and Information Systems, Probability and Statistics in Computer Science, Innovation/Technology Management