A new quantitative approach for information security risk assessment
Abbas Asosheh, Bijan Dehmoubed, Amir Khani · 2009
This article represent a new quantitative approach for assessing the overall information security risks in the real business environment. The new approach is based on Microsoft and Callio Secura approach which are common and practical approaches in the world. The advantage of this approach is that the organization can determine its business risk and the return on security investment.