Instructions

In this assignment, you will perform a qualitative risk assessment by filling out the provided Risk Assessment Template.

You can refer to the informational tabs in the worksheet so you know what the threat identification category codes mean. You will apply this to your own organization. For risk(s) identified, you will
Identify the threat
Identify the threat origin

Describe the threat

State the business impact
Make recommended corrective actions
Assess the likelihood, impact, and risk levels
You will document both technical and non-technical security risks to the system.

Complete this template, ensuring you have addressed at least 20 risks identified in your own organization. You will be graded on your ability to demonstrate that the security controls are appropriate to controlling risks you’ve identified as well as being able to identify appropriate risk levels based on impact and likelihood levels. Refer to the example given within the template for guidance.