Evaluation of General Services Administration´s risk assessment methodology

Security surveys must identify and consider any possible risk factors which might affect the security of a building, its tenants, and/or contents. Utilizing these factors and available office automation, spreadsheet software an algorithm called the risk assessment matrix (RAM) was developed to calculate risk levels associated with the characteristics of the building, resulting in generation of reports on recommended countermeasures and cost summaries for the recommended countermeasures. The authors describe the results of the evaluation of RAM in terms of the complexity of its methodology, adequacy of threat and target assessment, and protection system adequacy assessment. The evaluation results should assist management in objectively allocating resources to those areas where risk is greatest