Page 158 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide
P. 158
risk assessment, and addressing risk are all methods and techniques
involved in performing process/policy review.
