Scenario

You have been tasked by your supervisor to assess the risk of a web server that the organization heavily relies upon for business operations. The system uses the Microsoft Windows Server $2008$ R$2$ operating system, which is not monitored by any security controls and is not part of any vulnerability management program, scanning or patch management at present.

Your objective is to identify the top $5$ risks to this specific server from your perspective. It must be backed by research, and please include at least two sources on a references page.

Task

Using Microsoft Excel or Word, create a risk register. A risk register is a formatted document that identifies, categorizes, explains, and identifies a very brief risk response $($plan$).$ Be sure to include:

risk index,

risk name,

risk description,

risk categories $($asset$,$ data, people, etc$),$

probability,

impact,

risk rank,

the $[$fictitious$]$ risk owner,

a brief risk response plan $($either explanatory bullets or $2-3$ short paragraphs$)$ for each risk.