Risk Assessment

Risk Assessment

1. This evaluates the relative risk for each vulnerability, a risk rating is assigned to each information assesst.

   • Determine loss frequency
     • Describes an assessment of the likelihood of an attack combined with expected probability of success
   • Evaluating Loss Magnitude
     • The next step is to determine how much of an information asset could be lost in a successful attack.
   • Calculating Risk
     • Risk = Loss Frequency*Loss Magnitude+The uncertainty
   • Assessing Risk Acceptability
     • For each threat and associated vulnerabilities that have residual risk, create ranking of relative risk levels.