The Risk-Based Approach to Security

This document champions a proactive, risk-based approach to security. It explains the principal security effects (Deter, Detect, Delay, Respond) and the fundamental components of risk (Assets, Threats or Hazards, Vulnerabilities). It guides you through conducting a security risk assessment to identify valued assets and develop appropriate mitigation strategies – a foundational text for developing robust security programmes.