Re: Factor Analysis of Information Risk (FAIR)

As has been noted on another forum by several people, this basic risk 
management method looks a lot like material that was around since long 
ago.  I remember some of this from a review of critical analysis methods 
from an engineering course in the 70's.  And there are lots of versions 
of the "bald tire" scenario and the subsequent analysis.

And, as someone else pointed out in another forum, the definition for 
vulnerability appears to be 180 degrees from those already established 
in the risk management communities.

Perhaps a little risk management and critical thinking should be applied 
when reading the article.

lists@infostruct.net wrote:

> Included below is a link to a new risk analysis framework. This document is
> thought-provoking, an interesting read...
>
> Have a good weekend,
>
> Gideon
>
> Gideon T. Rasmussen
> CISSP, CISA, CISM, SCSA
> Wellington, FL
> gideon@infostruct.net
>
> http://www.ussecurityawareness.org
>
> http://www.riskmanagementinsight.com/media/docs/FAIR%20introduction%20DRAFT%
> 20v18.pdf
>
> --------------------------------------------------------------------
> mail2web - Check your email from the web at
> http://mail2web.com/ .
>
>
>
>