Risk assessment
Risk assessment is the systematic identification and evaluation of potential adverse events, including their likelihood and consequences, to determine their significance.
Data-Driven Cybersecurity
Risk assessment is the process of identifying, analyzing, and evaluating risks to determine their significance and acceptability.
- How it is used
- Guides cybersecurity investment and mitigation priorities by evaluating threats, vulnerabilities, likelihood, and business effects.
- How deep it goes
- Works through scope, threat and vulnerability identification, and prioritization metrics, while deferring a complete threat assessment.
- Examples
- Compares a medical-technology risk dashboard before and after mitigation using vulnerability targets and incident-response measures.
- What you can do after
- Practice/perform a scoped assessment that prioritizes mitigations by realistic threats, vulnerabilities, and business effects.
Read how Data-Driven Cybersecurity explains risk assessment →
Software Testing with Generative AI
The systematic identification, evaluation, and prioritization of risks affecting a software system or testing activity.
- How it is used
- Uses risk assessment to expand exploratory-testing ideas and focus test design on relevant threats.
- How deep it goes
- Provides a practical identify-prompt-review-reframe workflow, but stops short of prescribing formal risk-ranking methods.
- Examples
- Uses report-view, navigation, booking-submission, usability, data-integrity, and error-handling risks as concrete analysis examples.
- What you can do after
- Apply it via an LLM prompt, then evaluate, refine, and convert selected risks into exploratory-testing charters.
Read how Software Testing with Generative AI explains risk assessment →
Investing for Programmers
Risk assessment is the systematic evaluation of potential hazards, their likelihood, and their possible effects on an entity or asset.
- How it is used
- Guides the evaluation of nonfinancial threats and portfolio exposure when selecting a risk strategy.
- How deep it goes
- Compares algorithmic and LLM-assisted approaches but stops short of detailed, peer-reviewed professional assessment.
- Examples
- Uses asset-level ratings for pandemics, global trade wars, and climate change, with explanations recorded in a comparison table.
- What you can do after
- Evaluate portfolio exposure with a rating prompt, inspect supporting reasons, and respond more cautiously to concentrated risks.
Read how Investing for Programmers explains risk assessment →
Inside AI
Risk assessment is the process of evaluating the likelihood and potential impact of uncertain adverse events.
- How it is used
- Uses numerical predictions to inform decisions throughout the criminal justice process.
- How deep it goes
- Defines the practice through courtroom applications and outcome analysis, but stops short of explaining algorithm design.
- Examples
- Uses bail, sentencing, parole, and the 2016 ProPublica analysis of Broward County risk scores.
- What you can do after
- Evaluate predictive scores by comparing forecasts with later behavior and examining disparities across racial groups.
Related concepts
- NIST SP 800-30uses · A NIST Special Publication that provides guidance for conducting risk assessments of information systems and organizations.
- risk managementpart of · Risk management is the systematic process of identifying, assessing, and addressing uncertainties that could cause harm or affect objectives, assets, operations, or outcomes.
- language modelused by · A language model is a computational model that represents patterns in linguistic tokens to estimate sequence probabilities and predict or generate language from context.
- software updateconfigures · A software update is a change applied to existing software to modify or improve its behavior, correct defects or vulnerabilities, or add functionality.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.