The risk assessment is a first step to learning what type of security measures are needed to protect confidentiality, integrity, and availability of assets.

• 要弄清楚需要采取哪种类型的安全措施来保护资源的机密性、完整性和可用性,第一个步骤就是进行风险分析。