IT Security Risk Analysis

Good questions:

• What event could occur (threat event)?
• What could be the potential impact (risk)?
• How often could it happen (frequency)?
• How sure are you about the answer above (certainty)?