Once the risks identified, it is desirable to determine the security objectives. These objectives are an expression of intent to counter identified risks and / or to comply with organizational security policies. A goal can be on the target system, its development environment or operating environment
Security Information System | ISS | Part 2
