cyb er security

No

citations

…

no

references

…

..100 min

R

isk assessment is very crucial strategy in the process of data security and protection (Chabinsky,

2015). Both internal and external assessment have significant contribution towards risk management.

Below, 5 steps are identified to be accomplished by internal assessment team before external ones

arrive.

Asset Identification: In this step, company’s mission and objective will be identified. All company

assets like data centers, removable media and othe

rs will be assessed. Besides, users, owners, partners

will also be identified (“5 Steps to cybersecurity Risk Assessment”, 2018).

Vulnerability and Threat Identification: A list of existing organization’s vulnerability and threat will be

developed (“5 Step

s to cybersecurity Risk Assessment”, 2018).

Probability Determination: Given the existing control system, probability of

vulnerability to high,

medium and low will be determined (“5 Steps to cybersecurity Risk Assessment”, 2018).

Create a Target Cybersecur

ity profile: The organization’s desire towards cyber security results will be

considered (“5 Steps to cybersecurity Risk Assessment”, 2018).

Perform Gap Analysis:By evaluating the origination control system, cybersecurity risks will be

identified.

Why the

above 5 steps are selected?

The internal assessment team has the below advantages over the external assessors.

·

A broad and deep experience about the specific organization

·

Understands the organization existing structure

·

K

nows the organization chart and structure

·

Can provide the best analysis of the data and recommendation

By doing so, the organization will be cost effective as the external assessment is very expensive (“Risk

Assessments: Internal vs. external”, 2018)

Cha

binsky, S. (2015). Best Practices for Conducting a Cyber Risk Assessment.

Security: Solutions for

Enterprise Security Leaders,

52(11), 78. Retrieved from

http://eds.b.ebscohost.com.lopes.idm.oclc.org/eds/detail/detail?vid=0&sid=e966da04

-

3e8f

-

406e

-

948e

-

c815

e935e5f2%40pdc

-

v

sessmgr03&bdata=JnNpdGU9ZWRzLWxpdmUmc2NvcGU9c2l0ZQ%3d%3d#AN=110679778&db=ofs

5 Steps to cybersecurity Risk Assessment. (2018, April 20). Retrieved from

https://hacknowledge.com/blog

-

post/5

-

steps

-

to

-

cybersecurity

-

risk

-

assessment/

Risk Asses

sments: Internal vs. external. (2018). Retrieved from

https://searchfinancialsecurity.techtarget.com/tip/Risk

-

assessments

-

Internal

-

vs

-

external

No citations …no references…..100 min

Risk assessment is very crucial strategy in the process of data security and protection (Chabinsky,

2015). Both internal and external assessment have significant contribution towards risk management.

Below, 5 steps are identified to be accomplished by internal assessment team before external ones

arrive.

Asset Identification: In this step, company’s mission and objective will be identified. All company

assets like data centers, removable media and others will be assessed. Besides, users, owners, partners

will also be identified (“5 Steps to cybersecurity Risk Assessment”, 2018).

Vulnerability and Threat Identification: A list of existing organization’s vulnerability and threat will be

developed (“5 Steps to cybersecurity Risk Assessment”, 2018).

Probability Determination: Given the existing control system, probability of vulnerability to high,

medium and low will be determined (“5 Steps to cybersecurity Risk Assessment”, 2018).

Create a Target Cybersecurity profile: The organization’s desire towards cyber security results will be

considered (“5 Steps to cybersecurity Risk Assessment”, 2018).

Perform Gap Analysis:By evaluating the origination control system, cybersecurity risks will be

identified.

Why the above 5 steps are selected?

The internal assessment team has the below advantages over the external assessors.

 A broad and deep experience about the specific organization

 Understands the organization existing structure

 Knows the organization chart and structure

 Can provide the best analysis of the data and recommendation

By doing so, the organization will be cost effective as the external assessment is very expensive (“Risk

Assessments: Internal vs. external”, 2018)

Chabinsky, S. (2015). Best Practices for Conducting a Cyber Risk Assessment. Security: Solutions for

Enterprise Security Leaders, 52(11), 78. Retrieved from

http://eds.b.ebscohost.com.lopes.idm.oclc.org/eds/detail/detail?vid=0&sid=e966da04-3e8f-406e-

948e-c815e935e5f2%40pdc-v

sessmgr03&bdata=JnNpdGU9ZWRzLWxpdmUmc2NvcGU9c2l0ZQ%3d%3d#AN=110679778&db=ofs

5 Steps to cybersecurity Risk Assessment. (2018, April 20). Retrieved from

https://hacknowledge.com/blog-post/5-steps-to-cybersecurity-risk-assessment/

Risk Assessments: Internal vs. external. (2018). Retrieved from

https://searchfinancialsecurity.techtarget.com/tip/Risk-assessments-Internal-vs-external