Information Security Risk Assessment Toolkit: Practical Assessments through Data Collection and Data Analysis

In order to protect company's information assets such as sensitive customer records, health care records, etc., the security practitioner first needs to find out: what needs protected, what risks those assets are exposed to, what controls...