National level risk assessments: An analysis report

This report is based on a study and analysis of approaches to national-level risk assessment and threat modelling for cyber security which was conducted between April and October 2013.

The European Network and Information Security Agency (ENISA) aims to provide an evidence-based methodology for establishing a National-level Risk Assessment in order to contribute to the wider objective of improving national contingency planning practices (NCPs). This report will help towards rationalising national risk assessments in EU Member States in order to reduce or eliminate vulnerabilities in critical Information and Communication Technology (ICT) services and infrastructures.