Benchmark - Security Analysis and Policy Development
Loic@1313
MIS-657-RS-Risk-Assessment-Template1.xlsxTemplate
| Risk Assessment Template | |||||||||
| No. | Risk Title | Description | Vulnerability | Threat | Current Safeguards | Impact | Severity | Likelihood | Risk Value |
| R0 | Reset Account Lockout Counter After (CCE-9400) | This policy will disable an account if successive attempts to login fail within the threshold period. | If not set, someone can constantly try to gain access to system until successful. | Brute Force Attack by automated system. | Password Complexity policy is enforced, reducing the likelihood the Brute Force attack will succeed. | Some can gain full access to all data within system and any devices connected to the systems network. | Medium | Low | Low |
| R1 | No Value | No Value | No Value | ||||||
| R2 | No Value | No Value | No Value | ||||||
| R3 | No Value | No Value | No Value | ||||||
| R4 | No Value | No Value | No Value | ||||||
| R5 | No Value | No Value | No Value | ||||||
| R6 | No Value | No Value | No Value | ||||||
| R7 | No Value | No Value | No Value | ||||||
| R8 | No Value | No Value | No Value | ||||||
| R9 | No Value | No Value | No Value | ||||||
| R10 | No Value | No Value | No Value | ||||||
| R11 | No Value | No Value | No Value | ||||||
| R12 | No Value | No Value | No Value | ||||||
| R13 | No Value | No Value | No Value | ||||||
| R14 | No Value | No Value | No Value | ||||||
| R15 | No Value | No Value | No Value | ||||||
| R16 | No Value | No Value | No Value | ||||||
| R17 | No Value | No Value | No Value | ||||||
| R18 | No Value | No Value | No Value | ||||||
| R19 | No Value | No Value | No Value | ||||||
| R20 | No Value | No Value | No Value |
Sheet1
| Matrix |
| No Value |
| Low |
| Medium |
| High |
