July 2019 AST Magazine AST July 2019 Magazine | Page 68

CAIRA is a quantitative assess- www.AmericanSecurityToday.com ment that differs from a qual- itative assessment because it uses fixed numerical values, which have been field tested for accuracy, to evaluate the hazards, target criticality, vulnerabilities and risks. July 2019 - Edition 35 Because risk is quantifiable, the results of the analysis can be used as the basis for making informed decisions by organizational leaders for allocating resources – facili- ties, funding, property and personnel. In CAIRA, security counter- measures are selected based on their likelihood of lowering the risk to the Although performing a detailed risk asset, as well as, their cost effective- assessment is complicated, follow- ness. ing the CAIRA methodology makes In many cases, risk analysis and risk it manageable. management become an optimization analysis that examines risk reduction values (due to implementing counter- measures) and the associated costs to implement the identified remedies through a simple cost–benefit study. The results are tailored to an orga- nization’s needs and can be used to make informed decisions in the allocation of resources to mitigate risks. 66