ABSTRACT
On completion of this chapter, you will understand the difference between criticality and consequences and how to determine both criticality and consequences. You will also understand how consequence analysis is the key to prioritizing security program resources in order to get the best results for the least program expenditure. Risk can be prioritized by consequences so that limited funds can be spent on protecting the most important assets.
