OUTCOME:
Security Project Description
A project description that includes goals, processes, resources, and decision-making standards.

OUTCOME:
Prioritized Risk Assessment Report
Ranked list of vulnerabilities. This report will guide Risk Reduction efforts.

OUTCOME:
Crisis Management Plan
A blueprint for organizational continuity

OUTCOME:
Implemented Security Plan
Risk Analysis and Risk Reduction process must be regularly repeated to ensure effectiveness