. ▁▁ ▁Action ▁plans ▁and ▁security ▁projects ▁can ▁be ▁selected ▁to ▁manage ▁the ▁ris ks , ▁based ▁on ▁the ▁expected ▁effect iveness ▁of ▁additional ▁security ▁measures ▁and ▁the ▁times cal es ▁for ▁their ▁implementation . ▁ ▁The ▁preceding ▁analysis ▁enables ▁management ▁to ▁appreciate ▁the ▁business ▁benefits ▁of , ▁and ▁hence ▁justify , ▁appropriate ▁invest ment ▁in ▁information ▁security : ▁the ▁entire ▁process ▁is ▁business - dri ven . ▁ ▁ME H AR I ▁Ex pert ▁( 2 0 1 0 )' s ▁compreh ensive ▁knowledge base , ▁built ▁using ▁Excel , ▁is ▁available ▁in ▁both ▁English ▁and ▁French ▁as ▁an ▁interactive ▁tool , ▁or ▁more ▁accur ately ▁a ▁suite ▁of ▁tools ▁that ▁can ▁be ▁used ▁individually ▁but ▁are ▁designed ▁as ▁a ▁coh er ent ▁suite . ▁As ▁the ▁process ▁proceed s , ▁the ▁knowledge base ▁automatically ▁exp ands ▁with ▁the ▁information ▁obtained , ▁providing ▁inputs ▁for ▁subsequent ▁steps . ▁Cons istent ▁analysis ▁of ▁the ▁ris ks ▁and ▁controls ▁enables ▁large , ▁diverse ▁organizations ▁to ▁compare ▁and ▁contrast ▁operating ▁units ▁on ▁an ▁even ▁foot ing . ▁ ▁Add itional ▁applications ▁and ▁tools , ▁based ▁on ▁the ▁same ▁principles , ▁may ▁be ▁developed ▁under ▁Creative ▁Commons ▁license . ▁ ▁See ▁also ▁▁ ▁Att ack ▁( comput ing ) ▁ ▁Computer ▁security ▁ ▁Information ▁security ▁ ▁Information ▁security ▁management ▁system ▁ ▁IT ▁risk ▁ ▁Method ology ▁ ▁Th re at ▁( comput er ) ▁ ▁V ul ner ability ▁( comput ing ) ▁ ▁References ▁▁ ▁home ▁page ▁ ▁for ▁ME H AR I ▁tool ▁download