Risk, Uncertainty and Everything Else

A blog focused on the application of risk and uncertainty analysis to security problems

Risk, Uncertainty and Everything Else header image 4

Words Thou Shall Be Careful to Use in Risk (and Analytic) Communication

June 3rd, 2008 · No Comments

To follow up on my previous post regarding the work of Peter Sandman, I can’t help but advertise his short, yet important article entitled “Risk Words You Can’t Use” published in the August 2005 issue of The Synergist.  While this article is a quick read, I will distill it down further and caveat some with my personal experience:

  • Conservative: To risk people, conservative means an overestimate of risk.  To laypeople, a “conservative” estimate is a low estimate.  So whereas a risk person would use conservative to overstate the risk, a layperson (or perhaps decision maker) may interpret the message to be an understatement of risk, and thereby think that the risk could be much worse.  Now, engineers and scientists understand what is meant by the

[Read more →]

Tags: Peter Sandman · language · risk analysis · risk communication · risk perception · words of risk

Proceedings Available: 2nd National Conference on Security Analysis & Risk Management

May 31st, 2008 · No Comments

The Security Analysis and Risk Management Association (SARMA) just posted some presentations from their most recent conference (the 2nd National Conference on Security Analysis and Risk Management) on their website.  The titles of the available briefings as of 5/31/08 are:

[Read more →]

Tags: SARMA · commentary · risk management · security risk analysis