What is Risk? Flashcards
What is risk?
A thing (Bad thing that can happen) A state of being (Risk of natural disasters) A quantity (How much risk)
What is risk in FAIR?
A quantity.
Risk is…
A measurement of how much money an organization is likely to lose from a given scenario over a given
time-frame
Risk measurement of future loss comes from
estimates of Loss Event Frequency and Loss Magnitude. (Future loss, typically in a year)
Analyzing risk means…
Forecasting how much money the organization might lose from a scenario over a timeframe.
Assumptions are
Unavoidable part of doing risk analysis.
What do you have to identify in risk analysis?
Assumptions
Bald tire example is
4 part example of assumptions
Why is there no such thing as a risk?
Because risk is a quantity. (Scenario’s with associated amounts of risk)
Why is “what are the risks?” the wrong question?
Because risk is a quantity.
Correct question: How much risk do we have from the scenario as described?
Risk analysis is plagued by…
Unstated assumptions