NT2580 Unit 6 Quantitative And Qualitative Risk Assessment Analysis

Xander L. is a 17-year-old African American male and documented gang member. His prior juvenile adjudications include purse snatching, breaking and entering, and drug possession. His first juvenile adjudication occurred when he was 13 years old. He has served a year of custody in the juvenile correctional facility and has been placed on probation twice

Identify three types of sensitive information involved with each situation. Then, describe three ways in which each information item could be misused or harmed. For each of these, note at least one likely finding that you would include in a risk analysis report of the organization. Finally, answer the questions at the end.

Called and got permission from Steven to make the permission changes Simone specified. Confirmed she had access to the Payroll folder. Created a new Personnel listing RW group and added Simon to the group. Locked down the vacation and reimbursement folder and created an RW group for both. Added Simone to both groups. Called Simone and had her log off and back on. Confirmed her permissions were

the loss of data confidentiality is a huge risk and affect negatively to any business. The common term used for that is data breach. The most important factors at any business even small business are

Risk assessment and threat assessment should go hand-in-hand.The outcome of the risk assessment and threat assessment should provide recommendations that maximize the protection of confidentiality, integrity and availability while still providing functionality and usability. The purpose of a risk assessment is to ensure sensitive data and valuable assets are protected. An organization should take a hard look at who has access to sensitive data and if those accesses are required. The security audit should monitor the companies systems and users to detect illicit activity.The security audit should

The use of pesticides is an important decision that thousands of communities face each year. Nobody likes dealing with mosquitos and the diseases they bring so using chemicals and pesticides is an option but with other consequences. Mosquitos carry West Nile Virus that affects the city of Genericville every year with 50 cases projected this year in the city and two fatalities as well. On the other hand, the chemicals proposed for controlling the mosquito population has its own risks. The pesticide Malathion is also dangerous to people if they come in contact with it before it degrades. The potential for citizens of the city being exposed is almost a certainty

Data security is the responsibility of the information system team. Three responsibilities of this team are making sure the data is accurate, protecting the data from unauthorized users, and correcting the data if it is damaged. This includes protecting the system by firewalls, gouging phishing, and protecting data from a hardware or software loss.

As such, our company’s people resources pose the greatest risk for security breach. Our way to help mitigate risk in this area is to keep communication lines open in this area and to continually mandate security knowledge training, with mandatory updates on a regular basis. When the employees are informed of company policy when facing a security matter, they are better equipped to act in the best or right way. In this way knowledge is power – or at least empowerment to act in the best interest of the company’s information security.

Every organization must have adequate control mechanisms in place to help protect sensitive information from the distribution or transmission outside the organization, inappropriate disclosure, and control of how the information accessed is used. Companies should have policies in place that outline the course of action to take should inappropriate usage or disclosure of data be

2 Since the security is weak it can cause problems if the sensitive data is leaked out of the company in any way.

As technology grows and information has become a critical asset companies currently are devoted their resource and money to protect their data as important as their finance and human resource assets.

There are different approaches that can be taken when assessing risk. We can use quantitative methods, which deal in exact dollar amounts and figures. Quantitative methods are more concrete, but take longer to assess due to all the factors involved. This method would be more accurate at determining losses for our company which deals in information. You also have qualitative methods, which are more subjective and deal with assigning ratings. For example, you could have a risk rating system with values of

Prior to selecting or implementing any Data Security product every organization should perform a Risk Assessment. This is one of the most import first steps that must be undertaken by any organization. By performing a Risk Assessment you will be able to answer a number of the basic questions that are needed by any Data Security product.

As companies conduct research they come into contact with confidential and personal information, which comes at a level of risk for both the business and

The greatest hazard today is leak of information. Confidential data may be used for various malevolent purposes, including financial scam, willful destruction of the company’s reputation, unauthorized use of sensitive market and customers’ information by the competitors and other negative scenarios (Rausch, Sheta & Ayesh, 2013). The recent Panama Papers scandal illustrated that when the databases of the financial institution are penetrated by the third party, the results may be catastrophic. Another good illustrations include 2007 hack of the TJX Companies, Inc. (over 95 m user