| title | weight | date |
|---|---|---|
Information Risk Universe |
5 |
2020-03-18 |
This information risk 'universe' is a framework for information security risk professionals to explore, analyse and communicate cyber risk.
It serves a variety of purposes and can be used to construct and explore good risk statements in the format:
There is a probability that threat causes event resulting in outcome to asset of loss.
It was originally created from work by Phil Huggins and Robin Oldham and is now maintained by a group of contributors.
It is available as an open-source tool for the information security community to (re)use. See the license for more information.