Popular Risk Metrics for IT Security

Information Systems Security Association - GAISP
The International Information Security Foundation (IISF) - GASSP (GAISP Predecessor)
The International Standards Organization (ISO) - ISO 17799
The Organization for Economic Cooperation and Development (OECD) - Information Security Principles
The European Information Security Forum (ISF) - Standard of Good Practice
The Institute of Internal Auditors (IIA) - Systems Assurance and Control (SAC)
The Information Security Audit and Control Association (ISACA) - Control Objectives for Information and Related Technology (CobiT)