Download Oblig 2 -

Transcript
Obligatory Exercise 2 by group 4 – CORAS Report
Rayner(raynerv), Maja (majasm), Lavdim(lavdima), Vegard(vegaaa), Vincent(vincentg), Tonje(tonjeek)
Step 6 – Risk evaluation
Within this step we are supposed to make a risk evaluation of the risk estimation. These risks
will then be shown in several matrices tables.
Matrices tables
The risk that needs to be evaluated is presented in light blue, while the unpainted ones are
acceptable.
User information risks
Likelihood
Insignificant
Minor
Never
Rarely
Seldom
Sometimes
Often
Consequence
Moderate
Major
Catastrophic
UI1, UI3
UI2
Points risks
Likelihood
Insignificant
Minor
Never
Rarely
Seldom
Sometimes
Often
Consequence
Moderate
Major
Catastrophic
P1
Availability risks
Likelihood
Insignificant
Never
Rarely
Seldom
Sometimes
Often
Minor
Consequence
Moderate
Major
Catastrophic
AR2
AR1
Our risk overview diagram
In this diagram we are going to present all the possible threats within the system. This is for
helping the costumer to understand witch assets should be taken in consideration for
treatment.
15