- published: 13 Dec 2010
- views: 98218
Security Risk describes employing the concept of risk to the security risk management paradigm to make a particular determination of security orientated events.
According to CNSS Instruction No. 4009 dated 26 April 2010 by Committee on National Security Systems of United States of America a risk is:
Security risk is the demarcation of risk, into the security silo, from the broader enterprise risk management framework for the purposes of isolating and analysing unique events, outcomes and consequences.
Security risk is often, quantitatively, represented as any event that compromises the assets, operations and objectives of an organisation. 'Event', in the security paradigm, comprises those undertaken by actors intentionally for purposes that adversely affect the organisation.
The role of the 'actors' and the intentionality of the 'events', provides the differentiation of security risk from other risk management silos, particularly those of safety, environment, quality, operational and financial.