ABSTRACT

To the customer of the security risk assessment, the project is not complete until it is documented. One of the most important elements of the security risk assessment e¤ort is the reporting of the results. e security risk assessment team may have a clear understanding of the risks to the organization and the safeguards that should be employed, but that information must be conveyed to the organization in a clear and e¤ective manner.