Prepared By:

Threat assessment is an essential component of an information security risk evaluation. In order to prioritize vulnerabilities for remediation and to evaluate existing controls, a thorough understanding of potential threat sources is required. Particularly for financial institutions, this activity is a pre-requisite for a comprehensive information security program and a stated regulatory requirement. This paper explores key issues related to threat assessment, including essential elements, methodologies, and common pit... Copyright SANS Institut