Risk Assessment

Risk Assessment

System Characterization
1. System Related
  1. hardware & software
  2. system interface
  3. data & information
  4. people
  5. system mission
2. Information Gathering Technique
  1. document review
  2. questionaire
  3. on-site interview
  4. scanning tools
Threat Identification
1. Threat Source Identification
  1. hacker/cracker
  2. computer criminal
  3. terrorist
  4. Business espionage
  5. insider
2. Motivation and Threat Actions
  1. ego
  2. rebellion
  3. challenge
  4. monetary
  5. revenge
Vulnerability Identification
1. Vulnerability Sources
2. System Security Testing
3. Development of Security Requirements Checklist
Control Analysis
1. Methods
  1. technical
    1. IDS
    2. Encryption
  2. non-technical
    1. security policy
    2. management policy
    3. procedures
2. Categories
  1. preventive
  2. reactive
3. Technique
Likelihood Determination
Impact Analysis
Risk Determination
1. Risk Level Matrix
  1. likelihood rating
  2. impact rating
2. Description of Risk Level
Control Recommendation
Result Documentation

Resource summary

	Created by azamuddin about 10 years ago