Reference no: EM133046979

TransCon needs to have an understanding of the risks associated with the New Organisational Management System (NOMS) being developed and implemented across the organization. You have been consulted to provide an evaluation of contemporary cyber security risk management approaches and recommend the most appropriate for Transcon based on your analysis. Once you have justified the selection of your approach you will perform risk identification for Transcon.

Instructions
Assessment Task 2 - Template

[Insert Document Title Here]

{This document has been provided as a template to complete assessment task 2.

Use the SecureWorx SAD (Solution Architecture Document) New Organisational Management System Version 100 to complete this assessment task.}

[Insert Brief Document Introduction Here]

Question 1. Study the NIST document on Risk Management 800-39:

Answer the following questions:

i. Frame the risk for the Transcon corporation based upon the SecureWorx SAD document that you had previously studied for assessment 1.
a. The risk frame must comprise 3 assets that you have identified, a threat posed to each of these assets, the corresponding vulnerabilities (between 1-3), consequences of the threat and likelihood determination.
b. Identify the source of each of the threats from (a)
c. Identify constraints on the conduct of risk assessment, response and risk monitoring activities (4 constraints all together explained in 1 line each).
ii. Identify the risk to privacy of Transcon data, and propose a risk monitoring strategy in 200 words to contain this risk.

Question 2. Illustration of assets, threats, impacts and controls that apply to the provided scenario.

(i) Identification of Transcon's 4 priority assets; Use section ‘5 Solution Architecture' or section ‘6 Infrastructure Components' of the SAD to determine assets. Clearly state where these assets are referred to in the SAD using the asset classification table. Then you will need to act on behalf of Transcon as the asset owner to classify these for Transcon to complete the table.

(ii) Apply Weighted Factor Analysis (WFA) to determine relative value of Transcon assets.
Use table 2 to list Transcon assets to be prioritized.
Calculate relative importance of each asset using WFA
Criteria, weights and impacts on which to prioritise the assets are as follows:
• Criteria: Revenues, Profitability, Reputation.
• Relative weight of each criteria: 30%, 30% and 40%.
• Impact: Consequences that would result (for each criteria) if the asset were compromised - assign each information asset a score of between 0.1 and 1.0 for each criterion.

(iii) Perform Threat identification
Identify a maximum of 4 threats for each of the assets and determine the category each threat belongs to using slide 39 of Week 4 Lecture.

(iv) Perform Vulnerability identification
Identify one vulnerability for each threat from table 4 and record in table 5 to complete TVA worksheet.

Attachment:- Assessment Task Template.rar