Security risk management : building an information security risk management program from the ground up / Evan Wheeler ; Technical editor, Kenneth Swick.

Includes bibliographical references and index.

Part I: Introduction to risk management -- The security evolution -- Risky business -- The risk management lifecycle -- Part II: Risk assessment and analysis techniques -- Risk profiling -- Formulating a risk -- Risk exposure factors -- Security controls and services -- Risk evaluation and mitigation strategies -- Reports and consulting -- Risk assessment techniques -- Part III: Building and running a risk management program -- Threat and vulnerability management -- Security risk reviews -- A blueprint for security -- Building a program from scratch-- Appendix A: Security risk profile -- Appendix B: Qualitative risk scale reference tables -- Appendix C: Architectural risk analysis reference tables.