Instructions

Find and list Risk assessment methodologies$/$standards $($ways of assessing

risk$)$ examples are $($such as ISO$/$IEC FIDIS $27005$:$2008$ or NIST SP $800-30),($or

other ones that might interest you$).$ Find the internet links to the standards

$($i$.$e$.,$ find the links to the underlying documents$)-$ Don't pay for them

State why one methodology might be useful to you as an IT professional and

what its weaknesses $($why it might not work for you$)$ might be$.$

Use References!!!!