Question 1

Asset ID: (select at minimum 4 asset ID's, for example, People, Process and Software (which become your rows), Vulnerability, Consequence (your rating), Likelihood and Treatment (Mitigation).

Example Matrix:

Asset ID	Vulnerability	Consequence	Likelihood	Treatment
People
Software
Process

Your matrix must be filled out so that a risk assessment/mitigation strategy for identified asset is clearly stated with relevant information. Use link above to assist in answering essay question. Each Row is worth 5 points with a total of 20 points for the entire matrix.

• 
  

points

	question 2
	The Security Life Cycle Model is a process that helps in maintaining an acceptable level of security in industrial controls systems and networks. The model begins with deterrence and ends with correction. In your own words, describe this process while incorporating an example (e.g., of how to deter XX and how to prevent XX and so on through the cycle). Your reply should be a minimum of 1 paragraph. A paragraph is 3 sentences minimum and 5 sentences maximum. It is OK if you go beyond 1 paragraph.

points

	question 3
	NIST 800-82 is a guide to Industrial Control Systems (ICS) Security, which SCADA falls under. Select one control, identify whether the control falls under Management, Operational or Technical Controls and explain what this control helps mitigate in a SCADA system? Provide an example of this control in a real world situation (for example you can refer to one of the case-studies and explain how XX control could have mitigated Y). Your reply should be a minimum of 1 paragraph. A paragraph is 3 sentences minimum and 5 sentences maximum. It is OK if you go beyond 1 paragraph.