Evaluation of information systems' risk treatment efficiency proposal

Identified and evaluated risk, when its level exceeds predefined acceptable limit, is usually a subject of further treatment. The goal of all undertaken steps is to bring risk down to the satisfactory level, but without generating unnecessary costs. Proposing and implementing counter measures, or taking any other decision requires deep analysis of numerous alternatives from many perspectives. Applying individual solutions to each scenario is not only far from time-efficiency, but also increases complexity of detection of correlations between various solutions and their influence on overall risk reduction. Complex approach to risk treatment requires efficiency evaluation of chosen risk treatment. Risk treatment efficiency evaluation is proposed.