null
US
Entrar
Registre-se gratuitamente
Registre-se
Detectamos que o JavaScript não está habilitado no teu navegador. Habilite o Javascript para o funcionamento correto do nosso site. Por favor, leia os
Termos e Condições
para mais informações.
Próximo
Copiar e Editar
Você deve estar logado para concluir esta ação!
Inscreva-se gratuitamente
45106
Security Mgt U5, risk analysis and mgt (part 1)
Descrição
IYM001 Mapa Mental sobre Security Mgt U5, risk analysis and mgt (part 1), criado por jjanesko em 13-04-2013.
Sem etiquetas
iym001
iym001
Mapa Mental por
jjanesko
, atualizado more than 1 year ago
Mais
Menos
Criado por
jjanesko
mais de 11 anos atrás
129
20
0
Resumo de Recurso
Security Mgt U5, risk analysis and mgt (part 1)
risk model
risk
identify, analyze, model
assets
threats
vulnerabilities
management
countermeasures
implementation
audit
definitions
risk
potential for an unwanted event to have a negative impact upon an activity by exploiting an exposure
risk management
reduction of the exposures identified by risk analysis to a level acceptable to the organization
gap analysis
highlights areas where there are significant gaps i the security managemen process or in security measures implemented
business impact analysis
identifies impact for organization if the functions that core information systems are interrupted. quantifies importance for business
assets
physical environment
hardware
data
software/systems
communications network
infrastructure
staff
4 kinds of risk
business
project
operational
financial
related legislation
HIPAA
Gamm Leach Bliley Act
Basel II
Sarbanes Oxley
financial services and markets act
manuallly documented or software-guided?
manual
low cost to entry
simpler but error prone
less efficient
harder to share and repeat
increased cost of expertise maintenance
software guided
consistently implements a specific methodology
guides user
reusable, shareable
dynamic, efficient
software options (image)
Anexos:
Security Mgt U5, Risk Analysis Methods and Tools (image)
ISMS documentation set
infosec policy
information asset register
risk assessment report
statement of applicability
policies and procedrues
threat motivation
resources
opportunity
capability
publicity
asset attractiveness
qualitative vs. quantitative
qualtitative
capable of handling soft impacts
handles hard & soft impacts consistently
adapts to emerging best practices
accepts that risk mgt is evolving
relies on consensus of "best placed"
dependent on expert opinion
only as good as your best expert opinion
quantitative
every loss is capable of beig expressed in financial terms
requires careful records
formula for financial impact (image)
Anexos:
Security Mgt U5, quantitative risk assessment forumula (image)
expected frequency of attacks is known (statistics bank)
has problems with new risks
has problems with less concrete risk
Quer criar seus próprios
Mapas Mentais
gratuitos
com a GoConqr?
Saiba mais
.
Semelhante
Security Mgt, ISO 27001, PDCA
jjanesko
Exemplary Assignment Answers
jjanesko
Security Mgt, Flashcards for ISO 27000 series
jjanesko
Security Mgt U8, Information Assurance
jjanesko
Security Mgt U3, BS7799 (Part 2)
jjanesko
Security Mgt U5, quantitative risk assessment forumula (image)
jjanesko
Security Mgt U8, Incident Recovery Image
jjanesko
Security Mgt U3, BS7799 (Part 1)
jjanesko
Security Mgt U5, Risk Analysis Methods and Tools (image)
jjanesko
Security Mgt U5, risk analysis & mgt (part 2)
jjanesko
Security Mgt U10, Scope of Incident Response (chart)
jjanesko
Explore a Biblioteca