You are asked to do an asset classification and information security risk analysis assessment for the Careless and Inexpensive Hosting Service (CIHS).

a) Define a simple asset management classification based on the sensibility of the asset to C, I and A.

b) Define and list at least 3 assets in a simple table and calculate asset values based on the methodology you defined in Step a.

c) Define a methodology for risk assessment. You may use one of the methodologies discussed in the class, but be sure to use your own numbers for risk calculations.

d) Find out the vulnerabilities and threads for your assets (that were defined in Step b).

e) Create a list for the management indicating the risks and vulnerabilities specific to the organization. The report should include a risk matrix chart to help explain your findings.