A quality risk analysis is one that you, the expert, stand behind. You must be able to explain and defend the outcome.
Risk analyses are used to identify risks, determine measures and put responsibility where it belongs. But after the report you (C)ISO are not finished.
In this podcast episode, CISO Fleur van Leusden, explains all about risk analysis and how to get it right.