This is a book written for dummies so they realize that they are dummies. I looked for the "for dummies" version of risk analysis,so I can pretend I "understand"risk analysis while talking about the subject and yet could not find anything out there. As matter of fact I had in my library several other books about risk and yet none of them came close to explaining the:
.- What is risk analysis
.- What is risk?
.- Proess of analysis:
-Planning
-assessing
-risk treatment
These are but the first 5 chapters of the 13 chapter book. The book is well researched, it relates to the research literature in the field of risk. It is divided into 2 parts; The first part is theory and methods, the second part is examples of applications.
The book is well written, however it was not written for what I needed it for. I needed to have a simple methodology to map to ITIL V3 risk management practices or Sigma Six risk assessments; I did get there but it was very hard, I had to use 100% of my already depleted brain, it nearly killed me, thanks to the author I knew how to do a "Consequence analysis" and come up with a "Risk picture" and stop reading the parts heavy with Calculus and stuff.
So, in conclusion; If you have a "young" brain and auditors are blubbering you about "if this happens than ...." scenarios. I suggest you use this book to gain the upper hand.
