Risk Assignment A small computer network solutions company is analyzing their risks. The risk events, occurrence and detectability are given below. Risk Event Impact Likelihood Detection Difficulty Risk Value (probability) (severity) 95% 1. Malicious code Infection 2. Administrator 76% Account hacking 3. Account compromise 4. Improper use 51% 95% 95% 5. Spam 2 6. Natural disaster 5% 7. Information theft 5 26% Likelihood of Occurrence (Probability) Probability range Natural language expression Probability value Score 91% thru 99% "very likely to occur" 95% 61% thru 90% *probably will occur 76% 41% thru 60% *may occur 51% 11% thru 40% "unlikely to occur 26% 1% thru 10% "very unlikely to occur 5% a. Calculate the risk value for each risk event b. What risk event has the highest priority? c. What response plan should you have in-place to minimize the highest risk event? (must be Specific, just saying, 'minimize it is not sufficient. (refer to table below) a. Calculate the risk value for each risk event b. What risk event has the highest priority? c. What response plan should you have in-place to minimize the highest risk event? (must be Specific, just saying, minimize it is not sufficient. (refer to table below) Countermeasure costs Anti-virus $1,000 Firewall $2,000 Intrusion detection system $600 Training & education $1,500 Uninterrupted power system $2,500 Active directory $1,000 Back-up server $1,200 Spam filtering $500 Net work access control $2,200 E-mail policy enforcement $2,000