14.1 As part of a formal risk assessment of the IT system of your university, you have identified the asset “integrity of stored file and database information of all the students and faculty stored on the server” and the threat “corruption, theft, loss of information from server.” Suggest reasonable values for the items in the risk register for this asset and threat with justifications for your choice.
14.2 As part of a formal risk assessment of desktop systems in a small accounting firm with limited IT support, you have identified the asset “integrity of customer and financial data files on desktop systems” and the threat “corruption of these files due to import of a worm/virus onto system.” Suggest reasonable values for the items in the risk register for this asset and threat and provide justifications for your choices.
14.3 As part of a formal risk assessment of the main file server for a hospital management system, you have identified the asset “confidentiality of medical records of patients of hospital on the server” and the threat “theft of medical information of patients.” Suggest reasonable values for the items in the risk register for this asset and threat with justifications for your choice.
Note:
Problem 14.1, if you are unable to have direct access to an organization try to look one up on the web, must identify your source though. Your answer may be one to three pages for this problem.
Problems: 14.2 and 14.3, for those problems you may add any assumptions for the organizations described to justify your answers. Make sure that you write your assumptions as part of your answer.