Your Assignment 1. Select 2 assets 2. Calculate the risk rating for each asset/vulnerability (show your calculation progression) 3. Present your answers in a word or PDF document and submit that document. A. Choose two of these (you will use the loss ratings). B. Find what threats are related to the assets you chose. C. Given the threats, you will see from this table how the asset is currently vulnerable to the threat. Using the index number, reference the second table below for find additional information necessary for your calculations. A note on Risk Rating: Risk Rating = Risk Factor % risk mitigated by current controls + uncertainty value regarding the current vulnerability Keep in mind that the likelihood is the likelihood that a threat will affect your vulnerability. Sometimes this is given to you outright. In this example, you calculate that likelihood by multiplying the likelihood of the threat by the likelihood of the vulnerability. Use the loss rating for the asset as the impact value. Remember also that \% mitigation should take into account the likelihood of the impact (i.e., you need to multiply). The same applies to the uncertainty value. So... when calculating mitigation, take the mitigation value and multiply by the risk factor. When calculating the uncertainty part, multiply the uncertainty by the risk factor. The risk factor takes into account the value of the asset and the likelihood of impact. Alternatively you could also submit your answer like this: Asset Name: Index Number: Step 1. Likeihood = Threat Prob x Vuln Prob = ANSWER HERE Step 2. Risk Factor = Likelihood x impact (loss rating) = ANSWER HERE Step 3. (risk mitigated by current control) = risk factor x safeguard mitigation = ANSWER HERE Step 4. (uncertainty of knowledge of vulnerability) = risk factor x uncertainty = ANSWER HERE Step 5. Risk Rating = Part 2 Part 3+ Part 4= ANSWER HERE