Considering dependencies in risk analysis

Abstract

Operating of an IT system should be based on risk management. It means a kind of risk analysis should be applied periodically. There are several methods to achieve risk analysis. However most of them result set of protective measures for the largest risks, and don’t consider dependences of risks. In this article we present a method which takes into account overlapping the effects of protective measures and gives better solution than earlier procedures.