Why 2 times 2 ain't necessarily 4 - at least not in IT security risk assessment

Jens Braband

Recently, a novel approach towards semi-quantitative IT security risk assessment has been proposed in the draft IEC 62443-3-2. This approach is analyzed from several different angl…