Assets and Risk Managment

Assets and Risk Managment

1. Asset Managment

   • Assets Identification
     • Inventory of
       • Hardawares
       • Softwares
       • Network Devices
     • Firmware
     • Runtime environments , libraries
   • Assets Classifications
     • 1.category Identifications
       • Information asset
       • Software asset
       • Physical Asset
       • Services
       • 2.Identifying the owner
         • Owner for all information assets
         • Owner for the all software app..
         • 3.Crederia for identification
           • Confidentiality
           • value
           • Time
           • Access Right
           • Destruction
           • 4.Implement Schema
   • Assets Lifecycle
     • Procurement
     • Deployment
     • Utilizations
     • Maintenance
     • Disposal

2. Risk Managment

   • Risks Types
     • High Risk
     • Lower Risks
     • Acceptable Risks
   • Risk Managment Process
     • Frame the risk
     • Access the Risks
     • Respond to Risks
     • Monitor the RIsks

3. Risk Assessment

   • Thread Source Type
     • Adversarial
       • threads from individuals , groups, organizations, nations
     • Accidental
       • actions with out malicious intend 
     • Environmental
       • natural disaster, human - aided
     • Structural
       • software hardware failures
   • Risk Analysis
     • Examine the dangers poses by the disasters or human involved actions
     • Quantitative Risk Analysis
     • Qualitative Risk Analysis
   • Mitigations
     • Accept the risk and periodically reassess
     • Reduce the risk by implementing controls
       • by providing updates and patches
     • Avoid risk by changing approach totally
     • Transfer the risk to 3rd party
       • hire specialist 

4. Security Controls

   • Control types
     • Administrative Control
       • determine how people acts consists with policies and procedures
     • Technical Control
       • -involved software and hardware - manage risks and provide protections
     • Physical Control
       • separate people or other threats from system
   • Functional security Controls
     • Preventive Control
       • prevent unauthorized and unwanted activities happen
     • Deterrent Control
       • discourage before something happens
     • Detective Control
       • identifies the different type of unauthorized activities 
     • Corrective Control
     • Recovery Control
     • Compensative control
       • alternative solutions