Assessing Information System Vulnerabilities and Risk

1

Project 3

-

SAR & RAR Outlines

Security Assessment Report (SAR)

I.

Title Page

II.

Abstract

III.

Purpose

IV.

Organization

V.

Scope

VI.

Methodology

VII.

Data

VIII.

Results

IX.

Findings

X.

Conclusion

XI.

References

Risk Assessment Report (RAR)

I.

Title Page

II.

Abstract

III.

Threats

IV.

Vulnerabilities

V.

Likelihood of

Exploitation

VI.

Impact from Exploitation

VII.

Remediation

a.

Cost/Benefit Analysis

VIII.

Plan of Actions & Milestones (POA&Ms)

a.

Creation

b.

Monitoring

c.

Closing

IX.

Conclusion

X.

References

1

Project 3 - SAR & RAR Outlines

Security Assessment Report (SAR)

I. Title Page

II. Abstract

III. Purpose

IV. Organization

V. Scope

VI. Methodology

VII. Data

VIII. Results

IX. Findings

X. Conclusion

XI. References

Risk Assessment Report (RAR)

I. Title Page

II. Abstract

III. Threats

IV. Vulnerabilities

V. Likelihood of Exploitation

VI. Impact from Exploitation

VII. Remediation

a. Cost/Benefit Analysis

VIII. Plan of Actions & Milestones (POA&Ms)

a. Creation

b. Monitoring

c. Closing

IX. Conclusion

X. References