Conceptual Framework for the DIAMONDS Project

DIAMONDS is a research project addressing the combination of security testing and risk analysis. The main objective is to develop guidelines and a supporting framework to help businesses find a balanced approach within the three-dimensional space of invested effort, security testing, and risk analysis. This report documents the conceptual framework for DIAMONDS by clarifying the notions of security testing, risk analysis, and related notions, as well as defining the relations among them.

Oppdragsgiver: The DIAMONDS project supported by the Research Council of Norway