Risk Management
Instruction
Security Control Selection Principles
The total cost of a control includes the following:
- Selection
- Construction and replacement
- Acquisition (materials and mechanisms)
- Maintenance and testing
- Non-trivial operating cost
- Potential side effects
- Environmental modifications
- Impact on operations