| 摘要 |
Methods and apparatus, including computer program products, for risk assessment and analysis. Asset data representing a set of assets is received. Threat data representing a set of threats is received. Measures data representing a set of measures is received. A loss expectancy based upon the value of the assets, the potential reduction of value caused by the threats, and the protection of the value caused by the measures is automatically calculated. Project data representing a simulated project is received. A revised loss expectancy is automatically calculated based upon the value of the assets, the potential reduction of value caused by the threats, and the protection of the value caused by the measures as modified by the simulated project. A savings caused by the simulated project is automatically calculated based upon the loss expectancy and revised loss expectancy. |
| 主权项 |
1. A computer program product, tangibly embodied in a tangible machine-readable storage medium, for execution by a processor, the computer program product being operable to cause data processing apparatus to:
present a questionnaire form on display, the form adapted to collect reporting data from a plurality of users pertaining to a set of measures; receive asset data representing a set of assets, the asset data including a respective value for each asset in the set of assets having a value; receive threat data representing a set of threats, each threat in the set of threats potentially reducing the value of one or more of the assets in the set of assets; receive measures data representing the set of measures, each measure in the set of measures protecting the value of one or more assets such that i) asset data representing one of the assets in the set of assets or ii) measures data representing a measure in the set of measures, is based on reporting data collected from the plurality of users through the questionnaire form; automatically calculate a loss expectancy based upon the value of the assets, a potential reduction of value caused by the threats, and a protection of value caused by the measures; receive project data representing a simulated project, the simulated project modifying one or more assets, threats, or measures; automatically calculate a revised loss expectancy based upon the value of the assets, the potential reduction of value caused by the threats, and the protection of the value caused by the measures as modified by the simulated project; automatically calculate a savings caused by the simulated project based upon the loss expectancy and revised loss expectancy; and generate a report, the report including at least one of the savings caused by one or more simulated projects. |
