Steps to a successful creation of a corporate threat management plan
Bill Hancock · Computer Fraud & Security · 1998
One of the problems of computer security is deciding on how much security is necessary for proper control of system and network assets. This gets down to the concept of threat assessment or, more specifically, what do you have and who would want it? While it sounds relatively simple to state, it's not that easy to assess corporate network threats unless you approach things in a structured manner. In this article, the basics of threat assessment are discussed with some thought placed on how to identify who wants to take what you have or hurt you in some way.