Comparative Analysis of Two Risk Assessment Methods in Information Systems

Risk management is the process that has to be applied to all areas of business. The paper sets out to discuss risk management primarily in the field of information systems. Numerous national and international standards have dealt with this field of work. American National Institute of Standards and Technology (NIST) has developed standards, instructions and guidelines for particular issues relating to risk management in information systems, which can be compared to the international ISO standards. Special Publications 800-30, 39, 37...examine the risk assessment method in information system (IS) which is in this paper analyzed in comparison with the method created by B. Nikolic, who has developed it in the field of Occupational Safety and Health (OSH), and which has been applied in the field of information technology (IT).