Week : Vulnerability and Risk Assessment

Select a commercial facility with a mission that you are familiar with to conduct a vulnerability and risk assessment. As you are aware now, the threat assessment, vulnerability assessment and risk assessment are part of the same security assessment process. However, the risk assessment cannot be properly done without completion of the other antecedent assessments since the risk assessment is capstone building upon the other the threat and vulnerability assessments.

Based on your readings describe the vulnerabilities while prioritizing the risk assessment factors and providing a risk rating. Secondly, for each priority critical asset risk note how you would mitigate the noted threat or vulnerability using security measures. The counter measures may be simple - - such as improve the lighting, add a motion alarm, hire a security guard, and fortify the perimeter, or complex - - such as adding advanced technological security measures. Assume that you have a reasonable budget so that you would have to justify any high expenses to protect a critical asset.

It will take some effort to condense these assessments, but it can be done if you stay focused on the most important critical assets to prioritize and reduce risks to an acceptable level.

As a suggestion, use a matrix or bullet form to list threats and vulnerabilities. Take care so that the information is well organized and communicates a risk assessment. Try to justify qualitatively, or quantitatively, how much your recommended security measures will likely reduce the risk of threats and vulnerabilities to an acceptable level.