风险分析示例：如何评估风险

Personally identifiable information

• Name
• Address
• Social Security number
• Credit card number

High

Financial information

• Credit card number
• Verification code
• Expiry date
• Authorization reference
• Transaction reference

High

<Name of business application>

Regular user

Read/Write

10

ABC Group

Atlanta

Cyber criminal

• Web defacement
• Social engineering
• System intrusions (break-ins)
• Identity theft

Malicious insider

• Browsing of personally identifiable information
• Unauthorized system access
• Accidental or ill-advised actions taken by employees that result in unintended physical damage, system disruption or exposure

Employees

• Illness, death, injury or other loss of a key individual

Reputation

• Loss of confidence from employees
• Damage to the reputation of the company

Organizational (planning, schedule, estimation, controlling, communication, logistics, resources and budget)

• Improper worker termination and reassignment actions

Legal and administrative actions

• Regulatory penalties
• Criminal and civil proceeding

Technical

• Malicious code (e.g., virus)
• System bugs
• Failure of a computer, device, application, or protective technology or control that disrupts or harms operations or exposes the system to harm

Environmental

• Natural or man-made disasters

Poor password strength

Passwords used are weak. Attackers could guess the password of a user to gain access to the system.

Lack of disaster recovery

There are no procedures to ensure ongoing operation of the system in the event of a significant business interruption or disaster.

High

The threat source is highly motivated and sufficiently capable, and controls to prevent the vulnerability from being exercised are ineffective.

Unauthorized malicious disclosure, modification, or destruction of information

Moderate

The threat source is motivated or capable, but controls are in place that may impede successful exercise of the vulnerability.

Unintentional errors and omissions

Low

The threat source lacks motivation or capability, or controls are in place to prevent, or at least significantly impede, the vulnerability from being exercised.

IT disruptions due to natural or man-made disasters

Unauthorized disclosure of sensitive information

The loss of confidentiality with major damage to organizational assets.

The incident may result in the costly loss of major tangible assets or resources, and may significantly violate, harm or impede the organization’s mission, reputation or interests.

High

IT disruptions due to unauthorized changes to the system

The loss of availability with a serious adverse effect on organizational operations.

The organization is able to perform its primary functions, but the effectiveness of the functions is significantly reduced.

Medium

Non-sensitive data is lost by unauthorized changes to the data or system

The loss of integrity with a limited effect on organizational operations assets, or individuals.

The organization is able to perform its primary functions, but the effectiveness of the functions is noticeably reduced.

Low

High

There is a strong need for corrective measures. The system may continue to operate, but a corrective action plan must be put in place as soon as possible.

Moderate

Corrective actions are needed and a plan must be developed to incorporate these actions within a reasonable period of time.

Low

The system’s owner must determine whether corrective actions are still required or decide to accept the risk.

Hurricane

Power outage

Install backup generators

Moderate

Low

Low

Lack of disaster recovery plan

Disaster recovery

Develop and test a disaster recovery plan

Moderate

High

Moderate

Unauthorized users can access the server and browse sensitive company files

Open access to sensitive content

Perform system security monitoring and testing to ensure adequate security is provided for <server name>.

Moderate

High

Moderate