olemus
ISO 31073, ISO/IEC 27000:
protsess riski iseloomu ja riskitaseme väljaselgitamiseks;
loob aluse riski hindamisele ja riskikäsitluse otsustamisele
= process to comprehend the nature of risk and to determine the level of risk
Note. Risk analysis provides the basis for risk evaluation and decisions about risk treatment.

ülevaateid
https://www.project-risk-manager.com/blog/qualitative-risk-techniques/

https://www.hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/securityrule/riskassessment.pdf

https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Grundschutz/International/bsi-standard-2003_en_pdf.pdf?__blob=publicationFile&v=2

http://www.jcomputers.us/vol12/jcp1201-06.pdf

https://airccse.org/journal/jcsit/6114ijcsit03.pdf

https://www.files.ethz.ch/isn/47029/hb_riskanalysis&management.pdf