Discussion:
Given multivariate, multidimensional events generated by adaptive human agents, perhaps it would not be too far a stretch to claim that no two events are precisely the same. Given the absence of actuarial data, what can a poor security architect do?
Length: Minimum of 400 words
Due date: Sunday, September 20, 2020
Assignment:
Briefly respond to all the following questions. Make sure to explain and backup your responses with facts and examples. This assignment should be in APA format and have to include at least two references.
Faced with the need to deliver risk ratings for your organization, you will have to substitute the organization’s risk preferences for your own. For, indeed, it is the organization’s risk tolerance that the assessment is trying to achieve, not each assessor’s personal risk preferences.
1. What is the risk posture for each particular system as it contributes to the overall risk posture of the organization?
2. How does each attack surface – its protections if any, in the presence (or absence) of active threat agents and their capabilities, methods, and goals through each situation—add up to a system’s particular risk posture?
3. In addition, how do all the systems’ risks sum up to an organization’s computer security risk posture?
Length: Minimum of 600 words
Due date: Sunday, September 20, 2020