Lesson plan
MEHARI
MEHARI (MEthod for Harmonized Analysis of RIsk) is a free, open-source method for information risk analysis and risk management used by information security professionals. MEHARI is intended to help business managers, information security/risk management professionals and other stakeholders evaluate and manage the organization's risks relating to information, information systems and information processes (not just IT). It is designed to align with and support information security risk management according to ISO/IEC 27005, particularly in the context of an ISO/IEC 27001-compliant Information Security Management System (ISMS) or a similar overarching security management or governance framework.
Article summary
MEHARI (MEthod for Harmonized Analysis of RIsk) is a free, open-source method for information risk analysis and risk management used by information security professionals. MEHARI is intended to help business managers, information security/risk management professionals and other stakeholders evaluate and manage the organization's risks relating to information, information systems and information processes (not just IT). It is designed to align with and support information security risk management according to ISO/IEC 27005, particularly in the context of an ISO/IEC 27001-compliant Information Security Management System (ISMS) or a similar overarching security management or governance framework.
Key claims
No claims recorded.
Discussion questions
- Summarise the article in your own words. Which single claim would you verify first, and why?
- Which claim in this article is most likely to be revised as the sources update? How would you check its current status?
- If two sources disagreed about one of these facts, what would you need in order to trust one over the other?
Bibliography
No sources recorded.
Key claims and bibliography are generated from the same tracked claims and sources as the article page.