Risk Assignment A small computer network solutions company is analyzing their risks. The risk events, occurrence and detectability are given below. Risk Event Likelihood Impact Impact Detection Difficulty Risk Value (probability) (severity) 95% w 76% w 1. Malicious code Infection 2. Administrator Account hacking 3. Account compromise 4. Improper use 5. Spam 6. Natural disaster 7. Information theft 51% 95% 95% 5% 26% $ $ Likelihood of Occurrence (Probability) Score Probability range 91% thru 99% 61% thru 90% 41% thru 60% 11% thru 40% 1% thru 10% Natural language expression 'very likely to occur 'probably will occur 'may occur 'unlikely to occur 'very unlikely to occur Probability value 95% 76% 51% 26% 5% Calculate the risk value for each risk event What risk event has the highest priority? What response plan should you have in place to minimize the highest risk event? (must Specific, just saying, 'minimize it is not sufficient. (refer to table below) Countermeasure costs Anti-virus $1,000 Firewall $2,000 Intrusion detection system $600 Training & education $1,500 Uninterrupted power system $2,500 Active directory $1,000 Back-up server $1,200 Spam filtering $500 Net work access control $2,200 E-mail policy enforcement $2,000