Risk Management week 4 with excel work
amemon
Week4.docxRisk Identification Exercise
PURPOSE OF ASSIGNMENT
According to NIST, the goal of a risk assessment is for an organization to understand "the cybersecurity risk to organizational operations." This exercise will take the student through performing a risk assessment on IT assets using the NIST SP 800-30R1 "Guide for Conducting Risk Assessments."
INSTRUCTIONS FOR CONDUCTING RISK ASSESSMENT AND ANALYSIS
You have been requested to conduct a cyber risk assessment and analyze the results for a set of IT assets listed in the attached excel file. This worksheet was generated from a recent IT asset audit that was conducted at the request of the IT director.
You will use the 4-step Risk Assessment Process to determine risk of these assets.
You are to research each of the assets for any vulnerability using the NIST National Vulnerability Database and the Common Vulnerability Exploit web sites. The Pulse Secure VPN Server 8.2R1.0 gateways Appliance example has these references listed.
Once you have identified the vulnerabilities, you have the flexibility to Identify Threat Sources and Events, the Likelihood of Occurrence, Determine the Magnitude of Impact.
For each asset:
1) Assess the inherent risk given the existing set of controls.
2) Make a recommendation on how to manage the risk.
3) Assess the residual risk of each asset,. Assume your risk management recommendation is accepted.
FORMATTING REQUIREMENTS
Refer to the UCOL Format and Style Requirements on the Course Homepage, and be sure to properly cite your sources using Turabian Author-Date style citations. (Links to an external site.)Links to an external site.
Rubric
ICT-4215 Assignment Rubric 2 (2)
|
ICT-4215 Assignment Rubric 2 (2) |
||||||
|
Criteria |
Ratings |
Pts |
||||
|
This criterion is linked to a Learning OutcomeContent and Assignment tasks completed |
|
15.0 pts |
||||
|
This criterion is linked to a Learning OutcomeWriting & logic (communicates purposefully, solid narrative flow) |
|
5.0 pts |
||||
|
This criterion is linked to a Learning OutcomeGrammar and Citation (error-free, follows assignment guidelines, and Turabian) |
|
5.0 pts |
||||
|
Total Points: 25.0 |
