This question already has an answer here:
- Security Assessment vs. Risk Analysis 3 answers
I am a little confused about the difference between the risk assessment and risk analysis. Many people argued to conduct risk assessment during the requirement phase and risk analysis during the design phase.
Could you please explain to me the difference between them?