Hands-On Project 1-1: Assessing and Prioritizing Risks, page 40

You have been hired as the security professional in your current work or school environment. Your department has experienced a recent breach within its database architecture. Your manager feels it is time to reassess the network as a first step in a phased approach to hardening the network security. You have been delegated to lead this assessment. Research your organization or school to determine its database architecture. Write a paper describing your assessment process. Include the following information in your paper:

Define who would be included in the assessment of the database environment.

Identify the assets that you are protecting.

Define the threats you are protecting yourself against.

Using the following table, assign a risk value to each threat, based on its likelihood and cost to the company.

Prioritize your threats based on their risk value (5 being the highest risk and 1 being the lowest).

Risk values 5 = high, 1 = low High cost Medium cost Low cost High probability Medium probability 4 Low probability 4 Risk values 5 = high, 1 = low High cost Medium cost Low cost High probability Medium probability 4 Low probability 4