This document is a introduction version of the CISRA risk assessment method, which does not include specific implementation steps and various worksheets used in the implementation process.
Creating this document The purpose is to make information security enthusiasts can have a basic understanding of the CISRA risk assessment method. Promote the in-depth study of the information security industry to the risk assessment method, so that the information system risk assessment work truly on the security construction of the organization information system, the final right The organization is helpful.
Collaborative information system risk assessment _ introduction version _ (open password: cisrav1.0) .pdf