Risk-Centered Practices

SEI Report
In this paper, Julia Allen discusses the role that risk management and risk assessment play in choosing which security practices to implement.
Publisher

Software Engineering Institute

Abstract

This article establishes the role that risk management and risk assessment play in determining what security practices to implement and in what order. Risk management is critical in sustaining an acceptable level of security, given that it is not possible to be 100% secure.

Cite This SEI Report

Allen, J. (2013, July 2). Risk-Centered Practices. Retrieved September 14, 2026, from https://www.sei.cmu.edu/library/risk-centered-practices/.

@techreport{allen_2013,
author={Allen, Julia},
title={Risk-Centered Practices},
month={Jul},
year={2013},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/risk-centered-practices/},
note={Accessed: 2026-Sep-14}
}

Allen, Julia. "Risk-Centered Practices." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, July 2, 2013. https://www.sei.cmu.edu/library/risk-centered-practices/.

J. Allen, "Risk-Centered Practices," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 2-Jul-2013 [Online]. Available: https://www.sei.cmu.edu/library/risk-centered-practices/. [Accessed: 14-Sep-2026].

Allen, Julia. "Risk-Centered Practices." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 2 Jul. 2013. https://www.sei.cmu.edu/library/risk-centered-practices/. Accessed 14 Sep. 2026.

Allen, Julia. Risk-Centered Practices. Software Engineering Institute. 2013. https://www.sei.cmu.edu/library/risk-centered-practices/