risk analysis

A process consisting of three components: risk assessment, risk management and risk communication performed to understand the nature of unwanted, negative consequences to human and animal health, or the environment.

The process of identifying the risks to system security and determining the likelihood of occurrence, the resulting impact, and the additional safeguards that mitigate this impact. Part of risk management and synonymous with risk assessment.

1. A systematic method of identifying the assets of a data processing system, the threats to those assets, and the vulnerability of the system to those threats. [2382-pt.8] 2. In COMSEC (communications security), an organized method of estimating or calculating the probability of compromise. [After X9.49] 3. Synonym [in INFOSEC] risk assessment.