Information Security Risk Management in Critical Informative Systems

This contented analysis examines the Large Information Security Engineering domain, existing Risk Management Framework (RMF) processes, and specific Security Risk Analysis (SRA) approaches as it pertains to the Information Assurance (IA), and security of Critical informative Systems (CIS), sustaining missions of ranging criticality categories processing, transmitting, and management information of various classification levels. Risk determinations made by approving authorities benefit from a truly quantitative, qualitative and hybrid and risk decision metric for Critical informative Systems. A proposed metric is formulated by defining a continuous, time-dependent risk function based on multivariate analysis and probability distribution theory.