Assets Risks (provide brief description) Preventive Measures Risk Category Risk Impact Risk Frequency Risk Definition

Risk Impact Risk Frequency Risk Definition Risk Owner Action Plan
a. Action Plan for preventive measure A for Risk
a. Access Control Policy b. Having
1 (1st Asset)
different set of passwords every 60
b. Action Plan for preventive measure A for Risk 1
days. (1st Asset)
a. Data Breaching, Password guessin a. Action Plan for preventive measure B for Risk 1
A.Data (1st Asset)
1.Credentials b. Preventive measures for Risk #1 b. Action Plan for preventive measure B for Risk 1
1.1. Login Digital Security 2 5 Mitigation Student #1 - dat (1st Asset)
Username and a. Action Plan for preventive measure A for Risk
Password 2 (1st Asset)
Unautorized a. Preventive measures for Risk #2
b. Action Plan for preventive measure A for Risk 2
access (1st Asset)
b. Access Control a. Action Plan for preventive measure B for Risk 2
(1st Asset)
a. Preventive measures for Risk #2 b. Action Plan for preventive measure B for Risk 2
(1st Asset)
Legend: Legend Legend:
5: Highly Likely.
Risks in the
highly likely
category are
almost certain to
occur. 4. Likely.
Regular attention. 3:
Possible. Possible
risks may happen Avoidance – Elimination of the cause of
about half the time. the risk.
2. Unlikely. Risks in Mitigation – Reduction of the probability of a
the unlikely category risk’s occurrence or of its impact.
have a relatively low Transfer – Sharing of risk with partners,
chance of occurring. such as through insurance or other
1. Digital Security 2. 1. Highly Unlikely. ventures.
Environmental Risks Highly unlikely risks Acceptance – Formal acknowledgement of a. Implementation Access Control Policy b. Setting
credentials data breach 1. Access Control 3.Process Risks are exactly as they the presence of risk with a commitment to up the user account a 60 days changing of
sound monitor it. password
Legend:

10 up - Mitigation
Legend: 9 - 6 - Transfer
5 - Very High Damage 5-3 - Acceptance
4 - High 2-1 - Avoidance
Final: 3 - Moderate
Security Architecture 2 - Low
Action Plan 1 - Very Low
Summary of your Action Plan
Discuss the proposed action plan
Purpose
Benefits on your organization
If some of this actions, failed what will be your next step?