A new comparison framework for information security risk analysis methodologies

This article addresses the problem of selecting a methodology for information security risk analysis by presenting a framework that can be used to objectively compare different risk analysis methodologies, irrespective of their nature.