In an essay of no less than 250 words, answer the following:…
In an essay of no less than 250 words, answer the following: According to the National Institute of Standards and Technology Special Publication (NIST SP) 800-100, “risk is a function of the likelihood of a given threat source’s exercising a particular potential vulnerability, and the resulting impact of that adverse event on the organization.” Therefore, risk is an equation that includes likelihood, threats, vulnerabilities, and impacts. Define an example information system and describe the risk assessment process and the resulting risk calculation applied to that hypothetical information system. Be sure to include the categorization/characterization of your theoretical information system as part of your calculation.
Read Details