Carnegie Mellon University cmu-wordmark

Risk-Centered Practices

• SEI Report
By
In this paper, Julia Allen discusses the role that risk management and risk assessment play in choosing which security practices to implement.
Publisher

Software Engineering Institute

Abstract

This article establishes the role that risk management and risk assessment play in determining what security practices to implement and in what order. Risk management is critical in sustaining an acceptable level of security, given that it is not possible to be 100% secure.

SHARE
Download PDF
Cite This SEI Report

Allen, J. (2013, July 2). Risk-Centered Practices. Retrieved September 21, 2026, from https://www.sei.cmu.edu/library/risk-centered-practices/.

@techreport{allen_2013,
author={Allen, Julia},
title={Risk-Centered Practices},
month={Jul},
year={2013},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/risk-centered-practices/},
note={Accessed: 2026-Sep-21}
}

Allen, Julia. "Risk-Centered Practices." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, July 2, 2013. https://www.sei.cmu.edu/library/risk-centered-practices/.

J. Allen, "Risk-Centered Practices," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 2-Jul-2013 [Online]. Available: https://www.sei.cmu.edu/library/risk-centered-practices/. [Accessed: 21-Sep-2026].

Allen, Julia. "Risk-Centered Practices." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 2 Jul. 2013. https://www.sei.cmu.edu/library/risk-centered-practices/. Accessed 21 Sep. 2026.

Allen, Julia. Risk-Centered Practices. Software Engineering Institute. 2013. https://www.sei.cmu.edu/library/risk-centered-practices/

Ask a question about this SEI Report