Abstract :
Several security risk templates employ nonquantitative attributes to express a risk´s severity, which is subjective and void of actual figures. The author´s design provides a quantitative technique with an updated repository on vulnerabilities, threats, and countermeasures to calculate risk.
Keywords :
computer network management; decision trees; risk analysis; security of data; countermeasures; decision-tree model; quantitative technique; security meter; security risk templates; threats; updated repository; vulnerabilities; Computer security; Control systems; Government; Information security; Information systems; Job design; Management information systems; Privacy; Risk analysis; Risk management; measuring risk; qualitative design; quantify; security meter; threats;