Question

Why is performing a risk assessment needed along with performing a security assessment?   

Answer 1

Organizations have so many reasons for taking risk assesment along with performing a security assesment and we call it "Performing a Security Risk Assessment". Although the core goal remains same for every IT security risk assesments i.e identify the risks and quanitfy them. But different IT security risk assesments can vary greatly in terms of method and scopes.

Reasons for Performing a Security Risk Assessment

Cost justification: To justify the cost of overall souces and expenditure.

Productivity: To improve security.

Breaking barriers: To reduce the different work culture of management and IT staff.

Self-analysis: Making it easy and friendly to use.

Communication: To boost commuication.