Guest
Risk value calculation
Just need enlightenment on a trivial thing, normally I have seen that risk impact is multiple of likelihood and consequence/ severity i.e. Risk impact= likelihood of occurrence x consequence faced. However in your document Risk impact is taken as sum of both consequence and likelihood. Any technical reason why is this so?
Assign topic to the user
ISO 27001 RISK ASSESSMENT AND RISK TREATMENT METHODOLOGY
Define main rules for risk assessment and treatment.
Get it now 
ISO 27001 RISK ASSESSMENT AND RISK TREATMENT METHODOLOGY
Define main rules for risk assessment and treatment.
Get it now
ISO 27001 RISK ASSESSMENT AND RISK TREATMENT METHODOLOGY
Define main rules for risk assessment and treatment.
Get it now
Expert
Rhand Leal
Dec 22, 2016
Answer: For the purpose of a single risk value calculation, there is no particular technical reason for using sum instead of multiplication, and vice versa, to calculate risk value. The decision for sum or multiplication will only matter in more complex risk calculation activities, involving probabilistic theories, which is not the case.
Comment as guest or Sign in
Dec 22, 2016
Dec 22, 2016
Dec 22, 2016