Ver. 0.
1 / Last Update: 14/09/2019
Risk: Threat Community, Action, Asset, Impact
Risk Initiator What triggered the Threat Nation State
analysis? Management Cyber Criminal
request, audit finding, Organized Crime
project, change request, Privileged Insider
incident…
Non-privileged insider
Hacktivist
Act of Nature (Earthquake,
Tornado, Flood etc.)
Asset at Risk Asset, Resource, Process, Impact Area Availability
Capability… Confidentiality
Integrity
Safety
Compliance/Regulatory
…???
Risk Owner The person accountable Threat Type Malicious
for ensuring the risk is
Accidental
managed appropriately.
Snooping
…???
Forms of Loss Productivity Key Controls
Replacement
Response
Competitive Adv.
Reputation
Fines & Judgements
Assumptions: