Question

As part of a formal risk assessment of the main file server for University, you have identified the asset “integrity of the student accounting records on the server” and the threat “financial fraud by a student or staff, disguised by altering the accounting records”. Suggest reasonable values for the items in the risk register for this asset and threat and provide justifications for your choice.

Answer 1

• For every threat, survey the probability that the function will neglect to carry on as required, in view of your assessment of the specialized trouble of actualizing the function.
• Utilize the subjective scale depicted in the risk analysis methodology. The probability is an assessment of the probability that the item execution will neglect to meet the prerequisite as indicated, not that the client will commit an error. At the end of the day, we are keen on the probability that the item will neglect to distinguish invalid information, or neglect to effectively deal with substantial information, or generally carry on inaccurately.
• We are not inspired by the probability that a client will utilize a function erroneously, or give invalid information, or generally abuse the item.
• Survey the effect of a function's disappointment, in view of your comprehension of the item's motivation and your assessment of how a disappointment of that kind may influence the end client or client, as well as the engineer's main concern. You ought to counsel the venture specialist on the off chance that you can't decide the contact with certainty. Once more, utilize the subjective scale portrayed in the risk analysis technique.