|
An Introduction To |
|
Risk ReductionWhilst the risk is evaluated with no consideration of the effectiveness of applied controls it is necessary to allow the level of risk to be reduced by factoring in how effective the controls in place are for reducing the risks We will use the same markings for risks as above but hold them in separate fields with consideration of the control |
The Security Practitioner An Introduction to Information Security |