In IB Computer Science, security is not only about technology — it is also about planning and decision-making. One of the most important planning tools is risk assessment. Students are expected to understand what risk assessment is, why it is used, and how it helps organisations reduce harm.
IB examiners reward answers that explain process and reasoning, not just definitions.
What Is Risk Assessment?
Risk assessment is the process of:
- Identifying potential risks
- Analysing how serious those risks are
- Deciding how to reduce or manage them
In IB terms, a risk exists when:
- A threat can exploit a vulnerability
- Harm could occur as a result
Risk assessment helps organisations prioritise security efforts.
Why Risk Assessment Is Important
No system can be completely risk-free.
Risk assessment allows organisations to:
- Focus on the most serious risks
- Use resources efficiently
- Reduce the likelihood and impact of harm
Without risk assessment:
- Security decisions may be random
- Important threats may be ignored
- Time and money may be wasted
IB students should recognise that risk assessment supports informed decision-making.
