Task Descriptor: Evaluate Security Risks |
This taks describes the main aspects of ranking and prioritizing the discovered security issues.
Based on Method Task: Evaluate Security Risks
Relationships
Inputs | Mandatory: Test Findings | Optional: Test Evaluation Summary Test Plan | External: None
Outputs | Test Evaluation Summary
Steps
Identify the Security Risks Associated with each Vulnerability
Collate the information, analyze the findings, and list the risks associated with each vulnerability.
Rank the Security Issues by Priority
Choose an appropriate risk analysis method, analyze each finding, and rank it using a simple scale (such as High, Medium, or Low).
Properties
Multiple Occurrences |
Event Driven |
Ongoing |
Optional |
Planned |
Repeatable |
© Copyright IBM Corp. 1987, 2009. All Rights Reserved.