A Quantitative Measurement Methodology for calculating Risk related to Information Security.

Abstract

Nowadays, technology increases, so the risk related to technology is also increasing. Risk is the possibility of suffering loss. Therefore, we have to adopt some risk management methodology to reduce the number of risks. There are many risks are present in the organization. So it is the primary concern in risk management which risk we have to deal with because reducing every risk is not possible in any way. There is some risk that is always present, which is known as residual risk. Risk Assessment is the part of risk management. In this paper, we are focusing on quantitative approaches for risk assessment related to information security.