1. UrRISK01
In Class Exercise

2. I. Risk Assessment Introduction
Purpose
Why important?
Try to “quantify” value, threats, vulnerabilities
Scope
Scope of this risk assessment
Describe “security context”; Specify point of view (POV)
Key statement binds your team, project sponsor, and customer. Defines areas included, and excluded from study.
“Describe the system components, elements, users, field site locations (if any), and any other details about the system to be considered in the assessment.”

3. Select & Narrow the Scope

4. Professional Business Writing
Student Example
Cover Sheet
Introduction:
a) Purpose
b) Scope (what is and is not included in study)
APA Reference List
Use “Knightcite APA”
Attachment 1: Fact/Information Sheet
Research! (avoid starting from scratch)
Professional Business Writing

5. Security Context Example
These three study levels, presented on our SRA 111 Planning Cube, are personal, enterprise, and national
Security Context

6. Owner, customer, public, first responders, employees, etc.
Point of View?
Owner, customer, public, first responders, employees, etc.
POV?  Assets  Hazards

7. W/One Partner, Select ONE Area (then drill down to a very narrow scope)
QUESTIONS
Who is “protector/customer” (i.e., name and title of person that “hired” you to conduct the risk assessment)
What point of view did protector assign?
What “scope” of hazards will you evaluate?
What “scope” of hazards will you NOT evaluate?