Transcript Slide 1

Risk Analysis
Impact
Likelihood
Life
Low
Financial
Medium
Reduced after
Controls
implemented
Reputation
Likelihood
Productivity
X
High
Risk
=
High
Impact
Reduced after
Risk Transfer
Life
Financial
Reputation
High
Medium
Low
Productivity
That
Risk
Reduced after
Risk Transfer
and/or
Controls
implemented
Can be
Reducing
causing
Threats
and
compromise
Human, Natural
Technical, Physical
Environmental, Operational
Information
classified for
Value & Importance
High
Confidentiality
Will exploit
Medium
Low
and/or
High
Attack Surface
Vulnerabilities
Attack Surface
Reducing
To
attack
Integrity
Targets
People
Places
Processes
Systems
Medium
Low
and/or
High
Availability
Medium
Low
Vulnerabilities
Reduced after
Controls implemented
Reducing
©Hugh Burley – Thompson Rivers University - 2008
Transferred
to
Mitigated
Accepted
with
by
Executive
External
- Insurance
- Contracted Out
Must cost less
than possible
Impact
Controls
- Administrative
- Technical
- Physical
Must cost less
than possible
Impact