IT Risk Assessment Tools and Techniques

nist.gov. A National Institute of Standards and Technology (NIST) has been a leader in providing tools and techniques to support IT. It has a number of support tools that can be used for risk assessment purposes.

gao.gov. An U.S. Government Accountability O. ce (GAO) has provided a number of audit, control, and security resources as well as identi. cation of best practices in managing and reviewing IT risk in many areas.

Expected loss approach. A method developed by IBM that assesses the probable loss and the frequency of occurrence for all unacceptable events for each