Risk assessment, value education

A safety design review process will not be effective until the participants in the review team have acquired knowledge of hazards and risks and agreed on the risk assessment methods and risk assessment matrix to be used. Chapter 7, A Primer on Hazard Analysis and Risk Assessment, serves as a basis for the education of team members. Also, a safety design review process can be successfiilly applied only if senior management has been convinced of its value. 

The data from an accurate risk assessment of information value, threats, and vulnerabilities will provide the educator the ability to identify, select, and implement appropriate security measures. This does not require that the educator be an expert in safeguarding information, but it does assume that the educator has knowledge of information and knows when to provide a proportional response, even if that requires acquiring expert assistance in completing the task. The educator should understand productivity, cost effectiveness, and value of the informational asset and its threats and vulnerabilities and subsequently how to go about protecting it (Elky, 2006). 

---