Risk Analysis and Security Countermeasure Selection

This new edition of Risk Analysis and Security Countermeasure Selection presents updated case studies and introduces existing and new methodologies and technologies for addressing existing and future threats. It covers risk analysis methodologies approved by the U.S. Department of Homeland Security and shows how to apply them to other organizations

Table of Contents:
Preface. Acknowledgments. Author. Risk Analysis: The Basis for Appropriate and Economical Countermeasures. Risk Analysis Basics and DHS-Approved Risk Analysis Methods. Risk Analysis Skills and Tools. Critical Thinking and the Risk Analysis Process. Asset Characterization and Identification. Criticality and Consequence Analysis. Threat Analysis. Assessing Vulnerability. Estimating Probability. Risk Analysis Process. Prioritizing Risk. Security Policy Introduction. Security Policy and Countermeasure Goals. Developing Effective Security Policies. Countermeasure Goals and Strategies. Types of Countermeasures. Countermeasure Selection and Budgeting Tools. Security Effectiveness Metrics. Cost Effectiveness Metrics. Writing Effectiveness Reports.

About the Author :
Thomas L. Norman, CPP/PSP/CSC, is an internationally acclaimed security risk management consultant with more than 35 years of experience working in the United States, the Middle East, Europe, Africa, and Asia. He is the author of the industry reference manual on integrated security system design. He has developed formulas and processes that are used by the entire security industry to calculate the effectiveness of security programs and overall security program cost-effectiveness. His published works have been quoted and referenced by organizations such as the Cato Institute, the National Broadcasting Company, and Security Management.

Review :
Praise for the First Edition: "... by following the guidance laid out in this detailed book, security managers can do it themselves with software that's probably already on their office computers... There is no doubt that Norman himself spent considerable time devising the process, which he presents in the book. He provides step-by-step lists for building various matrices ... definitely a book for the advanced security practitioner. ... it outlined an excellent methodology and is well worth the effort required to read it and work through the process outlined by the author." - Glen Kitteringham, CPP, President of Kitteringham Security Group Inc., in Security Management, January 2011