The four phases of PUSH are:
- Preparation
Defining audience and purpose of risk assessment. - Universe definition
identifying and characterizing most critical assets, risks and controls. - Scoring
choosing consistent scales to rate importance of assets, impact of risk and the effectiveness of controls. - Hitting the mark
ensure risk assesment fulfils the purpose set out in the planning phase.