The GAO Report, Information Security Risk Assessment, identified three methods of conducting and documenting the assessment. These three methods were discussed in class. Using the information from the case study provided below identify the pertinent threats, vulnerabilities, and recommended countermeasures using one of the risk assessment methods from the GAO Report (SEE LINK BELOW).

Case Study: Recently, the Department of Veterans Affairs reported that an employee took a laptop computer home that contained records of millions of veterans. The computer was stolen. You were hired as an outside consultant to conduct a risk assessment and present the results to the Departments Chief Information Security Officer so she can prepare for a Congressional testimony.

GAO REPORT:

https://www.gao.gov/special.pubs/ai00033.pdf