CSSLP: Certified Secure Software Lifecycle Professional

Risk analysis evaluates risk from the potential impact to assets and the likelihood of a threat event. It therefore requires estimating potential asset losses or value, evaluating applicable threats, and establishing their likelihood and frequency. Asset valuation is not limited to hard costs because business impact can also include intangible effects such as reputation and mission impact.