Identify the information assets that exist in your organization. If you work for a large organization, refer only to your own department. Conduct an information asset inventory on your organization using the Asset Inventory and Risk Assessment Table located on the student website. Include information assets from the following general asset categories:
Complete the first six columns of the matrix and the annual rate of occurrence (ARO) column. Conduct a threat analysis for five selected assets, one from each of the asset areas listed above. List each threat with its associated asset in the matrix. Estimate the ARO for each threat.
Write a 3-5 page summary that discusses the top risks faced by the company and the strategies that should be taken to mitigate them. In your findings, discuss the following: