Risk Assessment Report- Docs

Risk Assessment Report
Table of Conten
1

t
1. Introduction..................................................................................................................3
2. Approach for the Risk Assessment..............................................................................4
3. System Characterization..............................................................................................5
4. Threats.........................................................................................................................6
5. Vulnerability Statement...............................................................................................7
6. Statement for Threat....................................................................................................8
7. Risk Assessment Result...............................................................................................8
References.........................................................................................................................11
2

Risk Assessment Report
1. Introduction
1.1 Purpose
The purpose includes determining various known threats to the organization’s network
infrastructure and IT assets. The identification of various threats includes the following tasks
such as,
 Identify the threat attack potential hackers on vulnerability in organization’s
information system and networks.
 Identify the type of remediation and mitigation techniques.
 Identify the function and purpose of firewalls for the organization’s network
infrastructure.
 Discuss the value of using firewall log files, database transaction and access
control.
 Identify the function and purpose of encryption.
 At last, provide the recommendation for methods to remediate and mitigate the
identified vulnerabilities ("Spoofing Attack: IP, DNS & ARP", 2020).
1.2 Risk Assessment’s Scope
RAR lists the threats, vulnerabilities and pairwise comparisons for each vulnerability and
threats. It also determines the likelihood of each event occurring and impact level on the
organization.
3

2. Approach for the Risk Assessment
2.1 Participants
The participants are:
 Team of Risk assessment
 Network Manager
 Network Security Manager
 Security Administrator
 Database Administrator
 System Owner
 System Custodian
2.2 Techniques Used
The used techniques are:
 Risk assessment related questionnaire
 Vulnerability sources
 Assessment Tools such as Wire shark, firewalls, encryption, and auditing.
 Transaction Walkthrough
 Documentation Review
 Site visit
2.3 Risk Model
In risk determination, the below provided model is used for risk classification,
4