IT Risk Assessment model

Modeling Information Risk Elements


Risk is combination of :-

• Financial impact
• Vulnerability
• Accessibility (Physical and Network Access)
  
• No of users
  
• Complexity
• System Design Complexity
• Organisational Complexity
• Technology Risk

For details visit:-
http://www.theiia.org/itaudit/index.cfm?act=ITAudit.archive&fid=482


Also visit:
Using Risk Models to Determine Information Risk Levels
Taking the Helicopter View of Information Risks