**3.1 Risk assessment standards**

The United States National Institute of Standards and Technologies (NIST) has produced many Special Publications on Risk Assessments [13]. **Figures 5** and **6** [14] show NIST's generic risk model and risk assessment process respectively. In fact, many organizations around the world are following the NIST Risk Assessment frameworks.
