The objectives are: (1) to determine the risk assessment of information security threats, based upon the perceived impact and the perceived probability of occurrence of these threats; (2) to determine the extent of risk mitigation, based upon the perceived level of preparedness for each of these information security threats; and (3) to determine the extent to which the of occurrence and the impact of information security threats relate to the level of preparedness.
No takes yet. Share an insight, caveat, or question.
Mary Sumner (2009) studied this question.
Synapse has enriched 5 related papers. Consider them for comparative context: