• A threat analysis, the first step in determining risk, identifies and evaluates each threat on a basis of various factors, such as its capability and intent to attack an asset, the likelihood of a successful attack, and its lethality.

• Risk management is the deliberate process of understanding "risk" -the likelihood that a threat will harm an asset with some severity of consequence-and deciding on and implementing actions to reduce it. Risk management principles acknowledge that; (1) while risk generally cannot be eliminated, it can be reduced by enhancing protection from validated and credible threats; (2) although many threats are possible, some are more likely to occur than others; and (3) all assets are not equally critical.

Generally, the risk-assessment process is the deliberate, analytical approach to identify which threats can exploit which vulnerabilities in an organization's specific assets. These variables are ranked according to predetermined criteria, such as the probability of a threat targeting a specific asset or the impact of a vulnerability being exploited by a specific threat. The risk-assessment results in a prioritized list of risks (i.e., threat-asset-vulnerability combinations) that can be used to select safeguards to reduce vulnerabilities and create a certain level of protection.

Off shore projects require contractual relationships with local security service providers. We specialize in selection, vetting, competitive sourcing and ultimate management of these service providers.