olemus
ISO Guide 73, ISO 31073, ISO/IEC 27000:
protsess riski iseloomu ja riskitaseme väljaselgitamiseks,
loob aluse riski hindamisele ja riskikäsitluse otsustamisele
= process to comprehend the nature of risk and to determine the level of risk
Note 1. Risk analysis provides the basis for risk evaluation and decisions about risk treatment.

ülevaateid
https://www.project-risk-manager.com/blog/qualitative-risk-techniques/

https://www.hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/securityrule/riskassessment.pdf

https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Grundschutz/International/bsi-standard-2003_en_pdf.pdf?__blob=publicationFile&v=2

http://www.jcomputers.us/vol12/jcp1201-06.pdf

https://airccse.org/journal/jcsit/6114ijcsit03.pdf

https://www.files.ethz.ch/isn/47029/hb_riskanalysis&management.pdf