ICT 380 - Security Master Plan Presentation Murdoch University ICT 380

ICT 380 – Security Master Plan Presentation ICT 380 – Security Master Plan Presentation Overview Overview 1. Risk Management, Assessment, and Control  Models, Tables, Charts 2. Technical Risks  Impact to organi ...

ICT 380 – Security Master Plan Presentation ICT 380 – Security Master Plan Presentation Overview Overview 1. Risk Management, Assessment, and Control  Models, Tables, Charts 2. Technical Risks  Impact to organization’s assets  Countermeasures to threats 3. Physical Risks  Impact to organization’s assets  Countermeasures to threats 4. Human Resource Risks  Impact to organization’s assets  Countermeasures to threats 5. Process & Procedure Risks  Impact to organization’s assets  Countermeasures to threats 1. Risk Management, Assessment, and Control  Models, Tables, Charts 2. Technical Risks  Impact to organization’s assets  Countermeasures to threats 3. Physical Risks  Impact to organization’s assets  Countermeasures to threats 4. Human Resource Risks  Impact to organization’s assets  Countermeasures to threats 5. Process & Procedure Risks  Impact to organization’s assets  Countermeasures to threats Risk Management Risk Management Risk Management: Identification, assessment and prioritization of risks followed by controlling, monitoring, and the minimizing of related events. Steps: 1. Identify the Risk Areas 2. Assess the Risks 3. Develop Risk Management Plan 4. Implement Risk Management Actions 5. Re-evaluate the Risks Risk Management: Identification, assessment and prioritization of risks followed by controlling, monitoring, and the minimizing of related events. Steps: 1. Identify the Risk Areas 2. Assess the Risks 3. Develop Risk Management Plan 4. Implement Risk Management Actions 5. Re-evaluate the Risks Risk Identification & Assessment Risk Control Identify and Assess the Risks Identify and Assess the Risks Table used to determine and display the following:  Resources/Assets  Type of Resource  Data Classification  Impact to Profitability, Revenue, and Reputation Table used to determine and display the following:  Resources/Assets  Type of Resource  Data Classification  Impact to Profitability, Revenue, and Reputation Qualitative Risk Analysis Chart Qualitative Risk Analysis Chart  Helps with the prioritization of the identified risks against the organization's assets by determining the:  Likelihood of it being carried out by an attacker  Potential impact if an attacker were to compromise and/or make the asset unavailable.