Scribd Logo
Upload

Welcome to Scribd!

  • KT-ISMS-FR-05 Information Security Risk Assessment

    Uploaded by

    Adil Abdulkhader
    22 views1 page
    This document is an information security risk assessment that evaluates assets, known threats, potential impacts, likelihood of threats occurring, ability to control threats, existing controls, and required actions. It assesses a desktop for risks related to internet connectivity and inadequate firewall protection, giving it a medium risk rating. The document also provides scoring guidelines for determining risk levels based on combinations of impact, likelihood, and controllability scores.

    Original Description:

    Copyright

    © © All Rights Reserved

    Available Formats

    XLSX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    This document is an information security risk assessment that evaluates assets, known threats, potential impacts, likelihood of threats occurring, ability to control threats, existing controls, and required actions. It assesses a desktop for risks related to internet connectivity and inadequate firewall protection, giving it a medium risk rating. The document also provides scoring guidelines for determining risk levels based on combinations of impact, likelihood, and controllability scores.

    Copyright:

    © All Rights Reserved
    Download as XLSX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as xlsx, pdf, or txt
    22 views1 page

    KT-ISMS-FR-05 Information Security Risk Assessment

    Uploaded by

    Adil Abdulkhader
    This document is an information security risk assessment that evaluates assets, known threats, potential impacts, likelihood of threats occurring, ability to control threats, existing controls, and required actions. It assesses a desktop for risks related to internet connectivity and inadequate firewall protection, giving it a medium risk rating. The document also provides scoring guidelines for determining risk levels based on combinations of impact, likelihood, and controllability scores.

    Copyright:

    © All Rights Reserved
    Download as XLSX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as xlsx, pdf, or txt
    of 1

    KT-ISMS-FR-05/D:01-11-2022/R:00

    INFORMATION SECURITY RISK ASSESSMENT


    Department: Date of Assessment:

    Asset Asset Known threats Impact Likelihood Controllability Control Measure / Action Action
    Confidentiality Integrity Availability Risk Rating Threat Value Responsibility Remarks
    Name Value Score 1-5 Score 1-5 Score 1-5 Mitigation Plan Due Date Status
    Internet connectivity; Anti Virus installed /
    Desktop inadequate firewall Low / Medium / High Firewall implemented
    protection

    SCORING GUIDELINE

    Score Impact Likelihood Controllability HIGH >15


    Essentially avoidable
    1 Minor impact Very unlikely through mitigation Immediate action to be taken by Management /
    actions Increase Audit Frequency

    2 Moderate impact Somewhat likely Highly controllable MEDIUM >9-15


    through actions

    3 Significant impact 50/50 Chance Moderately controllable Modification required as per mitigation plan
    through actions

    4 Very significant impact Highly likely Largely uncontrollable LOW >0 - 8

    5 Disastrous impact Nearly Certain Uncontrollable No Action Required. Continue with Current Controls

    Carried out By: Verified By:

    Page 1 of 1

    You might also like