Threats

Technology

Sub Category Threat Likelihood Impact Risk Score Risk Rank

Hardware

Failure

End user Desktops $248$ Low$-$Medium $(2)$

Routers $3412$ Medium $(3)$

Switches $3412$ Medium $(3)$

DHCP Servers $236$ Low$-$Medium $(2)$

VPN Gateway $236$ Low$-$Medium $(2)$

VOIP Servers $248$ Low$-$Medium $(2)$

Servers $4416$ Medium$-$High $(4)$

Network Wiring $248$ Low$-$Medium $(2)$

VOIP Phones $248$ Low$-$Medium $(2)$

Staff Laptops $339$ Low$-$Medium $(2)$

Unpatched

Hardware

Web Servers $3412$ Medium $(3)$

Databases $3412$ Medium $(3)$

Firewalls $4416$ Medium$-$High $(4)$

Routers $4416$ Medium$-$High $(4)$

Switches $4416$ Medium$-$High $(4)$

Window Workstations $4416$ Medium$-$High $(4)$

Email Servers $3412$ Medium $(3)$

Work Laptops $4416$ Medium$-$High $(4)$

HR Data Servers $3412$ Medium $(3)$

Office VOIP systems $3412$ Medium $(3)$

Unauthorized

Phishing Attacks $3412$ Medium $(3)$

Physical Access $248$ Low$-$Medium $(2)$

Firewall Breaches $3412$ Medium $(3)$

VPN access $248$ Low$-$Medium $(2)$

Malware Deployment $3412$ Medium $(3)$

Ransomware $4416$ Medium$-$High $(4)$

PAGE $3$

Access Email Server Breaches $3412$ Medium $(3)$

Poor Physical Security $248$ Low$-$Medium $(2)$

Mass Storage Arrays $3412$ Medium $(3)$

VPN Gateway Server

Breach $3412$ Medium $(3)$

Misconfigured

Software$/$Hardware

Firewalls $3412$ Medium $(3)$

VPN Key Storage $3412$ Medium $(3)$

Access Level Switches $4416$ Medium$-$High $(4)$

VLAN Configuration $4416$ Medium$-$High $(4)$

Poor Load Balancing $3412$ Medium $(3)$

Windows Active Directory $3412$ Medium $(3)$

HR Portal Permissions $3412$ Medium $(3)$

Payroll Portal Permissions $3412$ Medium $(3)$

Work Cellphone$($s$)3412$ Medium $(3)$

Wireless Network $3412$ Medium $(3)$

Environmental

Sub Category Threat Likelihood Impact Risk Score Risk Rank

Natural Disasters

& Hazards

Earthquake $224$ Low $(1)$

Flood $339$ Low$-$Medium $(2)$

Fire $236$ Low$-$Medium $(2)$

Lightning $212$ Low $(1)$

Wind storm $224$ Low $(1)$

Sinkhole $144$ Low $(1)$

Hurricane $133$ Low $(1)$

Snow $428$ Low$-$Medium $(2)$

Extreme temp. $4312$ Medium $(3)$

Tsunami $144$ Low $(1)$

Earthquake $224$ Low $(1)$

Risk Matrix

Risk $=$ Likelihood x Impact

Risk Quantifiers Low $(1)$ Low$-$Medium $(2)$ Medium $(3)$ Medium$-$High $(4)$ High $(5)$

Impact

The threat has

little to no impact

on the government

The threat has

little impact but if

it were to occur it

would be a minor

annoyance

The threat would

impact the

government

causing a

moderate delay to

recover

The threat would

highly impact the

government

making it hard to

recover but should

recover eventually

The threat has a

catastrophic impact

on the government

making it extreme$-$

ly difficult or not

possible to recover

from

Likelihood

The threat has no

prior history and is

extremely unlikely

to occur

The threat has had

prior history but is

unlikely to occur or

has no prior history

and appears it may

occur

The threat has had

recent history and

appears like it may

occur again

The threat has had

recent history and

appears to like it is

going to happen

again

The threat has

become realized or

is about to be

realized and

cannot be stopped

Risk Level Low $(1)$ Low$-$Medium $(2)$ Medium $(3)$ Medium$-$High $(4)$ High $(5)$

Risk Score

$(0-25)1-56-1011-1516-2021-25$