Project 2 - Comprehensive Risk Rating System (CRRS)
Very high = 9, high = 8, medium = 7, low = 6
Risk = Impact * Vulnerability
1. Assets that pose risk to the orgaisation :
- User : Vulnerability - High (8) , Impact : Very high (9) Risk 1 - 9*8 = 72
- HTTPS Protocol : Vulnerability - Medium (7) , Impact : High (8) Risk 2 - 8*7 = 56
- Browser : Vulnerability - High (8) , Impact : Very high (9) Risk 3 - 9*8 = 72
- Juniper IDS/IPS : Vulnerability - Low(6) , Impact : High (8) Risk 4 - 8*6 = 48
- Cisco VPN : Vulnerability - Low (6) , Impact : Very high (9) Risk 5 -9*6 = 54
- Cisco Firewall : Vulnerability - High (8) , Impact : Very high (9) Risk 6 -9*8 = 72
- Oracle Databases : Vulnerability - Medium (7) , Impact : Medium (7) Risk 7 -7*7 = 49
2. Overall Risk = (risk1+ risk2 + .... + riskn) / (total no of assets posing risk)
Overall Risk = (72+56+72+48+54+72+49) / 7 = 423/7 = 60.42
Overall risk for the organisation is 60.42