3. Alternative approaches to risk mapping

3.1 SSI mapping – Threats and vulnerabilities

Risk mapping in the field of information systems security can also be represented using the frequency-cost approach. However, the methodological approaches widely used in this field represent IT security risks in different ways, which are complementary.

Table 3 illustrates this approach, which can be found in the EBIOS Risk Manager method (recommended by the French National Agency for Information Systems Security), which aims to represent information systems security...