Sophia Faris

We don’t have enough information about this author to calculate their statistics. If you think this is an error let us know.
Learn More
Risk management methodologies, such as Mehari, Ebios, CRAMM and SP 800-30 (NIST) use a common step based on threat, vulnerability and probability witch are typically evaluated intuitively using verbal hazard scales such as low, medium, high. Because of their subjectivity, these categories are extremely difficult to assign to threats, vulnerabilities and(More)
  • 1