Project 2 - Comprehensive Risk Rating System (CRRS)

To calculate the overall risk for mybank corporation, we need to identify all assets and calculate the risk posed by each asset using the formula Risk = Impact * Vulnerability. Here's a table listing the critical assets of mybank corporation along with their associated risk levels:

Asset	Vulnerability	Impact	Risk Level
Web Application Server (Apache 2.0)	Possible	Critical	High
Relational DBMS (Oracle 11.2.0.2.0)	Possible	Critical	High
Router/Gateway/Firewall/VPN (Cisco - ASA Series, 9.14(x))	Likely	Critical	Medium
IDS/IPS (Juniper Networks - Junos OS Release 17.3R1)	Likely	Marginal	Low
Database Activity Monitoring (IBM - Guardium Data Protection 11.5)	Possible	Marginal	Low

To calculate the overall risk posed by these assets, we need to assign a weighted score to each risk level: Very high = 9, high = 8, medium = 7, low = 6. Then, we can calculate the overall risk using the formula: Overall Risk = (risk1 + risk2 + ... + riskn) / (total no of assets posing risk).

Here's the calculation:

Overall Risk = (8 + 8 + 7 + 6 + 6) / 5 = 7

Therefore, the overall risk level for mybank corporation is 7, which is in the medium range. In order to improve the security of mybank corporation, we recommend taking the following precautions:

1. Regularly monitor and update the Web Application Server and Relational DBMS to minimize vulnerabilities and prevent potential threats.
2. Implement a more robust Router/Gateway/Firewall/VPN solution to reduce the likelihood of potential threats.
3. Evaluate the effectiveness of the IDS/IPS solution and consider alternative solutions if necessary.
4. Maintain regular monitoring of the Database Activity Monitoring solution to quickly detect and respond to any suspicious activities.