A Comparative Analysis on Risk Assessment Information Security Models

This study equates a choice of methods that allow an organization to weigh their information security risk. The initial models went through two selection iterations before we end up with the final three Risks assessment models. The main purpose of the study is to compare and clarify the different activities, inputs and outputs required by each information security risk assessment models and also analyze which ones address information security risk effectively. The resulting information helps evaluating the models’ applicability to an organization and their specific needs. In order to verify and validate the conclusions taken from the theoretical study of the three final models, a practical experience was put into practice in a real organization.