This book is structured to focus on the practical implementation of risk assessment. The book is structured to go straight to the actions that a risk assessor will take to assess risk and provide recommendations that meet the business needs and risk appetite. The book is focused on specific implementation guidance rather than aspirational messages and vague high-level suggestions.Enterprise Information Security Risk Assessment details a methodology that adopts the best part of some established frameworks and teaches the reader how to use the available information to conduct a risk assessment that will identify high-risk assets. The book will provide you with the tools needed to execute a practical security risk assessment and adopt a suitable process for you.