Case Study: Information Security Risk Assessment – Answer Sheet

Table-1
Assets	Vulnerabilities	Threats	Probability (the numerical value)	Impact (the numerical value)	Risk (the numerical value) Risk = Probability x Impact

Probability (the numerical value)	Your Justification (Why you assigned that value for the probability)

Impact (the numerical value)	Your Justification (Why you assigned that value for the impact)

Table-2
Definition of Risk	Priority	Risk Response (Risk Acceptance, Risk Mitigation, Risk Avoidance, Risk Transfer, etc.)
The exploitation of the <vulnerability> of <asset> by <threat>
The exploitation of the <vulnerability> of <asset> by <threat>
The exploitation of the <vulnerability> of <asset> by <threat>