Student: Risk Assessment and Qualitative Risk Essay

Submitted By johnelson20
Words: 754
Pages: 4
Open Document
Unit 6 Assignment Quantitative and qualities risk assessment
Quantitative risk assessment begins when we have the ability to apply a dollar amount to a specific risk. If the project was to be finished a month early there would not be a risk because the company would save money, however at what cost? Projects that are done early usually go wrong. If the project is completed on time but not with the required security measures the company would not be in compliance with PCI DSS. By completing the project a month early using the mandatory security requirements there is no risk.
Qualitative risk assessment comes into play in a different form. There are additional factors and threat vectors into our contract. We now find out that the database that once held only 1,000 records is now going to hold a range of 100,000 records to 1,000,000 records, as well as the new knowledge that multiple groups within the organization will be accessing and modifying the database daily. We have also been informed that we have ninety days to document and remediate this issue as the system is not in compliance with the Health Insurance Portability and Accountability Act (HIPAA).
We must now see the inherent vulnerabilities that exist on the system or application. One of which is that the application is vulnerable to a SQL Injection; this is the method in which a malicious user will attempt to append additional data into an SQL statement in the hopes of gaining access to in which they do not have permission to access.
The quantitative value on this project is $$30 million; given that there may be up to one million records stored on the database; 1,000,000 records X $30 per record = $30 million. This brings us back to our qualitative risk rating.
Reputation risk is the impact on earnings and investor or consumer confidence as a result of negative publicity to the business. In our situation, the most likely cause is an unauthorized disclosure of customer data due to system or network compromise. The negative impact of such an event could easily surpass the monetary loss associated with our quantitative risk assessment.
At this point we have introduced a myriad of elements into our risk assessment. Given the simplicity of our outsider threat vector through SQL Injection, the fact that this form of attack is not often detected by system logs and Intrusion Detection tools, the reputation risk associated with going public with 500K compromised records and the probability that this attack vector is likely to be repeated once discovered, we can easily assign a qualitative risk level of "High." We now have a quantitative risk assessment value of $15 million and a qualitative risk level of "High."
We calculate the Single Loss Expectancy (SLE) by taking the value of an asset which would be a single record at $30, then take the Exposure Factor, which is 1,000,000 records, and multiply the Asset
Show More

Related Documents: Student: Risk Assessment and Qualitative Risk Essay

Nt2580 Lab 6 Assessment Paper

Lab #6 – Assessment Worksheet Developing a Risk – Mitigation Outline for an IT Infrastructure Course Name and Number: Risk Management IS355 Student Name: Sherry Best Instructor Name: Nicole Goodyear Lab Due Date: 2/13/2018 1. Why is it important to prioritize your IT infrastructure risks, threats and vulnerabilities? To be able to identify the CBF or the CBA of the company. By identifying the vulnerabilities, the be able to mitigate them. 2. Based on your executive summary produced in Lab 4 – Perform…

Words 626 - Pages 3

Applied Business Research Theory: Learning To Make A Difference

MANAGEMENT SCHOOL Learning to Make a Difference MODULE HANDBOOK 47625022987000 ULMS515 Applied Business Research Methods Semester 01 2014-15 Instant Feedback Facility (IFF) We want to hear from our students. If you have any comment or suggestion on any aspect of this module (or any module) please send it to: ulmsenq@liv.ac.uk . Make sure that you clearly mark your e-mail message "IFF - Instant Feedback Facility" Module information Name of module: Applied Business Research Methods…

Words 6112 - Pages 25

Essay on project management

(PG) 3 Contacts 3 Unit overview 3 Student feedback 3 TEACHING ACTIVITIES Schedule of activities Classes and learning 14 15 SECTION FOUR LEARNING RESOURCES SECTION TWO 14 17 Overview of learning resources and assessment 17 ASSESSMENT INFORMATION 5 Essential reading 18 Learning outcomes 5 Referencing requirements 18 Assessment summary 5 Librarian 18 Assessment 1: Case notes (20%) 6 Other resources that might…

Words 6308 - Pages 26

Essay about Risk: Risk Management

Risk Management In today’s business world there are many opportunities for small problems and mistakes to cause large problems for companies. There are also easy opportunities for criminals and competitors to steal material or information that would be devastating to the company. Whether it’s an outside or internal factor if it is missed it could cause the end for a company. These are some of the aspects that are assessed in risk management. In risk management plans need to be established with the…

Words 1673 - Pages 7

NT2580 Graded Assignments Essay

Graded Assignments STUDENT COPY The following sections contain student copies of the assignments. These must be distributed to students prior to the due dates for the assignments. Online students will have access to these documents in PDF format, which will be available for downloading at any time during the course. Graded Assignment Requirements Assignment Requirements documents provided below must be printed and distributed to students for guidance on completing the assignments and…

Words 5302 - Pages 22

Risk and Carey Business School Essay

Managing Financial Risk 2 Credits BU.230.730.83 Tuesday 1:30 p.m. – 4:30 p.m. From 3/24/2015 to 5/12/2015 Semester: Spring-2 Class Location: 203/204 (Harbor East) Instructor Nicola Fusari Contact Information Phone Number: (410) 234-9411 E-mail Address: nicola.fusari@jhu.edu Office Hours Baltimore: Wednesday 9:00 a.m. -12:00 p.m. (appointment only) Required Text and Learning Materials: Christoffersen P. F. (2012), Elements of Financial Risk Management, 2nd Edition, Elsevier. This is a technical…

Words 1588 - Pages 7

Questions: Financial Statement Analysis Questions

advantage? Its strategic logic? How does your company address corporate objectives? What drives the strategy? Can you identify your company’s strategic resources and its strategic capabilities? Has your company implemented a risk management strategy? What are the main risks facing this company? Week 4 To what extent does your company take sustainability seriously? Does your company follow a core strategy of sustainability, or is it just for appearances? Is there a sustainability report? Do they…

Words 539 - Pages 3

Curriculum with Mentoring Support Essay

& Wishengrad, 1977), and with gifted students (Torrance, 1984). Mentoring programs throughout most schools has traditionally focused on the at-risk student population placed at the alternative centers, but with the current change in Texas standardized testing from Texas Academic and knowledge Test (TAKS) to State of Texas Assessments of Academic Readiness (STAAR), the focus must change. In fact, there should be no focus but rather encompass all students. The support of a mentor can make a difference…

Words 2547 - Pages 11

Bsbrsk501 Essay examples

Assessment Tasks Assessor Guide BSBRSK501A: Manage risk Copyright ownership: United Business Services (Aust) Pty Ltd. This book is copyright protected under the Berne Convention. All rights reserved. No reproduction without permission. This book is protected by copyright and may not be reproduced or copied either in part or in whole nor used for financial gain without the express approval in writing of the owner (United Business Services (Aust) Pty Ltd) of the copyright. United Business Services…

Words 8783 - Pages 36

Essay about risk analysis of a project

Task 5 - Risk Analysis Project Risk Management Definition The project management team has not undertaken a similar medium-size project like the charity fashion show before; therefore risk analysis stage will require crucial attention. It is important to consider all the possible risks both internally from tasks within a project and those risks that may arise externally from the project without any warning. It is vital to deal with the risks, as they can be costly in terms of cost and time.…

Words 1667 - Pages 7