Assignment Risk Calculation

1
Assignment Risk Calculation

• You are a medium size online trading company that
  trades specifically online using the internet.
  24x7 hours a day is a must. You have been asked
  to do a risk assessment using the risk cube for
  the following risk areas for this company
• A. Non-sophisticated hacker or DoS attacks.
• - The costs associated with fixing this attack
  are 90, 000 sys admin, lost business for a 2 day
  outage 300,000 and
  potential lawsuit from customer 500,000
• - Severity of this loss to be calculated by
  EV.
• - Probability or likelihood of this happening
  is 30. (common)
• - Duration of impact is isolated.
• B. Electronic Fraud or extortion
• - The Costs are calculated range from 50,000 to
  300,00 average 150,000.
• - The severity is to be calculated by EV
• - Probability is 15
• - Duration is isolated.
• C. Insider Theft exposure of confidential
  financial, customer, or competitive information
• - The costs associated with this are potential
  lawsuit 500, 00 loss of business between 500,000
  and 1,000,000.
• - Severity is to be calculated by EV
• - Probability is 20
• - Duration is extended.
• D. Non recoverable destruction of customer
  databases or other mission-critical systems
• - Costs associated with fixing this is between
  2,000,000 5, 000,000.
• - Severity is to be calculated by EV

2
Results Template
REF Description Severity of Loss Duration Probability EV IMPACT
A
B
C
D
3
RISK ASSESSMENT CUBE Assignment Template
gt 50
Common
Likelihood (Probability) Of an Incident
Extended
Duration of Impact
Rare
Isolated
0
Low xxx
High xxx
Medium
Outcome Severity (loss)