Re: Re: Risk Assessment Modelling

My two cents:

1. "Am in the process of estimating the impact on the asset w.r.t C, I and 
A."
You probably need to re-look at the approach. It might be a better idea to 
assess the impact on Business rather than impact on asset.

2. I would appreciate if you could throw some light on "sum of squares" and 
"weighted scale' methods. Which one would be a better indicator?
All approaches are good. Just that you would need to assess whether all of 
C,I,A would be applicable to all assets.

 Cheers,
Karan

On 12 Jul 2005 09:02:03 -0000, spn9876@yahoo.com <spn9876@yahoo.com> wrote:
> I am sorry for my trouble. I need a piece of guidance regarding Risk 
Assessment. Am in the process of estimating the impact on the asset w.r.t C, 
I and A. When I was browsing the net for some guidance , I happen to come 
across your message on the www.securityfocus.com<http://www.securityfocus.com>. 
I would appreciate if you could throw some light on "sum of squares" and 
"weighted scale' methods. Which one would be a better indicator?
> Kind Regards and thanks,
> span