UrRISK01 In Class Exercise

I. Risk Assessment Introduction Purpose Why important? Try to “quantify” value, threats, vulnerabilities Scope Scope of this risk assessment Describe “security context”; Specify point of view (POV) Key statement binds your team, project sponsor, and customer. Defines areas included, and excluded from study. “Describe the system components, elements, users, field site locations (if any), and any other details about the system to be considered in the assessment.”

Select & Narrow the Scope http://www.personal.psu.edu/ejg8/class/sra311/Wk01_AssessmentRiskTypes.jpg

Professional Business Writing Student Example http://www.personal.psu.edu/ejg8/class/sra311/EmailID_EmailID_UrRISK01.pdf Cover Sheet Introduction: a) Purpose b) Scope (what is and is not included in study) APA Reference List Use “Knightcite APA” http://www.calvin.edu/library/knightcite/index.php?standard=APA Attachment 1: Fact/Information Sheet Research! (avoid starting from scratch) Professional Business Writing

Security Context Example These three study levels, presented on our SRA 111 Planning Cube, are personal, enterprise, and national Security Context

Owner, customer, public, first responders, employees, etc. Point of View? Owner, customer, public, first responders, employees, etc. POV?  Assets  Hazards

W/One Partner, Select ONE Area (then drill down to a very narrow scope) QUESTIONS Who is “protector/customer” (i.e., name and title of person that “hired” you to conduct the risk assessment) What point of view did protector assign? What “scope” of hazards will you evaluate? What “scope” of hazards will you NOT evaluate?