Performing a Qualitative Risk Analysis

In this exercise, you will identify a few assets within your organization and perform a

qualitative risk assessment by identifying example threats against the asset and then

calculating the risk based on a qualitative approach.

I. On a piece of paper, or using your favorite word processor, identify three

different assets within your organization.

Identify three or four threats against each asset.

Using the scale for probability displayed in Table $15-1,$ record the probability

value for each threat.

Using the scale of impact displayed in Table $15-2,$ record the impact each

threat will have.

Calculate the risk based on the formula of risk $=$ probability $$ loss $($impact$),$

and then prioritize the threats based on the highest risk being the highest

priority.