ABSTRACT

Management address probabilistic threats (e.g., natural

disasters, human errors, accidents, technology failures,

etc.), but fails to take into account speculative risks (e.g.,

legal or regulatory changes, economic change, social

change, political change, technological change, or manage-

ment and organizational strategies). In contrast, Risk-Based

Management is a methodology that involves the frequent

assessment of events (both probabilistic and speculative)

affecting an environment.