Reference no: EM133597101
Assignment: Assessing Security Controls and Risk
Based on the Assignment Scenario, determine the risk associated with the vulnerabilities. Use NIST SP 800-30 to calculate the risks for each vulnerability.
Part I: Report Risk
Develop a 2 to 3 pages Security Assessment Report (SAR) using the Assignment Template. The Security Assessment Report (SAR) should include the following for each vulnerability:
1. Vulnerability title
2. A precise vulnerability description
3. Likelihood
4. Impact
5. Overall risk level
6. Logical recommendations for mitigation
Part II: Communicate the Risk to Leadership
Develop a 10 to 12 slides Microsoft PowerPoint presentation documenting the risks for each vulnerability to be presented to the leadership of Health Coverage Associates.
The presentation should include:
1. An introduction slide
2. A description of each of the three vulnerabilities
3. An accurate illustration of the NIST SP-30 5x5 matrices
4. A description of the likelihood and impact, with a justification of that determination (e.g., very low, low, moderate, high, very high)
5. An illustration of the overall, high watermark level of risk (e.g., very low, low, moderate, high, very high)
6. A logical recommendation for mitigation actions, including an explanation of risk tolerance and risk acceptance for the organization
7. A conclusion slide
8. Detailed speaker notes.