The four phases of PUSH are:
Defining audience and purpose of risk assessment.
- Universe definition
identifying and characterizing most critical assets, risks and controls.
choosing consistent scales to rate importance of assets, impact of risk and the effectiveness of controls.
- Hitting the mark
ensure risk assesment fulfils the purpose set out in the planning phase.