March 2019 AST Magazine March 2019 AST Magazine | Page 10
www.AmericanSecurityToday.com
March 2019 - Edition 33
Typical ABRA chart & Graph showing reduction in vulnerability and risk
This phase of ABRA identifies the counter-
measures currently in place for a specif ic
target and assigns a value based on the
countermeasures effectiveness in mitigat-
ing threats (Baseline Vulnerability Rating
[BVR]).
Optimization Analysis
Optimization analysis is the reapplica-
tion of the vulnerability analysis after
implementing hypothetical improve-
ments resulting from countermeasures
that could be used for a specific asset.
Hypothetical countermeasures could in-
clude programmatic or procedural options.
The end result is an optimized vulnerabili-
ty rating (OVR) associated with the specific
target being analyzed.
Based on the optimization analysis, the av-
erage vulnerability and risk rating can be
identified and stated as a percentage.
Risk analysis is the aggregation of the
threat, target, vulnerability, and optimiza-
tion analyses to determine the calculated
value of risk associated with a specific as-
set that is being targeted by a specific threat.
Cost–Benefit Analysis
8