A Glossary of Financial Risk Management Terms
Definitions for some of the terms and concepts mentioned in the discussion of applying financial risk methods to security risk
By Todd Datz
November 01, 2004 — CSO — Definitions for some of the terms and concepts mentioned in this article. Some, such as risk, CSOs deal with on a regular basis. Others are important to understanding and valuing risk in corporate finance.
Beta: A measure of the volatility of a stock relative to the overall market. A beta of less than one indicates lower risk than the market; a beta of more than one indicates higher risk.
Black-Scholes formula: Groundbreaking options-pricing formula derived in 1973 by economists Fischer Black, Myron Scholes and Robert Merton. It is a way to determine the worth of an option to buy at a given time.
Expected value: The weighted average of a probability distribution.
Option: A contract that gives the holder the right, but not the obligation, to buy or sell a specified quantity of a security at a specified price within a specified period of time.
Portfolio management: A way of diversifying a portfolio of investments (that could mean all the security projects in your organization) that takes into account risk and return. For example, high-risk, high-reward investments or projects are balanced with low-risk, low-reward investments or projects. Introduced by economist Harry Markowitz in 1952.
Risk: The degree of uncertainty of return on an asset. Exposure to potential loss or damage.
Standard deviation: A measure of dispersion of a set of data from its mean.
Variance: A measure of the volatility or risk on an investment. Dispersion of a set of data points around their mean value. In mathematical terms, the square root of the variance is the standard deviation.
Read more about metrics/budgets in CSOonline's Metrics/Budgets section.
Other stories by Todd Datz
Security metrics are a challenge that CSOs must meet head-on. Here is unmatched depth for identifying effective metrics, collecting them, presenting them, and using them for operational improvement and for budgeting purposes.
Security metrics: Critical issues
Case studies, innovative ideas, finanical and operational metrics, effective presentation—the Web's best practical guide to security and operational risk metrics
The great IT risk measurement debate
Alex Hutton and Doug Hubbard on what metrics you have, what you need, and what you can do about it
The security data and survey directory
5 steps for communicating security's value to nonsecurity people
Security and business financial and budgeting basics
Great information security metrics
Metrics for physical security programs
- Balancing Increasing Security Requirements with Decreasing Budgets
- Gain Control of the New Threat Landscape
- Securing Your BYOD Strategy: Cisco Secure Mobility Solutions
- Securing Your BYOD Strategy: Cisco Secure Mobility Solutions
- Introduction to VMware vCenter Site Recovery Manager 5
- Reliable Disaster Protection with VMware vCenter Site Recovery Manager
- Overcome Top 7 Admin Challenges of Active Directory
- X-Ray of the PCI Process-4 Proactive Steps
- Beyond SFTP: Five Ways Secure Managed File Transfer Can Improve Your Business
- Secure Managed File Transfer: Bringing Coherence & Control to Compliance
- The TCO of FTP: Hidden Costs of "Free" File Sharing
- Streamline, Speed and Secure the Supply Chain with Managed File Transfer
- Patch Tuesday preview, February 2012
Microsoft published its Patch Tuesday Preview for February of 2012 a few minutes ago. IT admins can expect nine bulletins to address 21 security vulnerabilities.
It looks like four bulletins will be rated critical while the rest are designated as important.
Affected Microsoft products are:
- M86 report proves water is wet
- Actor, banker, soldier, spy: Suits and Spooks Anti-Conference aims to redefine security
More Salted Hash with Bill Brenner
