Rapid risk assessment (the Meerkat Method)

CRAMM, a well known risk assessment methodology in ITSM, provides a staged and disciplined approach embracing both technical (e.g. IT hardware and software) and non-technical (e.g. physical and human) aspects of security.

Read the article here.