tailieunhanh - fisma certification and accreditation handbook phần 7

sau đó quá trình ghi danh người sử dụng sẽ ngừng làm việc ngay cả khi các trang web New York vẫn còn hoạt động. Rõ ràng, một trong những cách để giảm thiểu nguy cơ này sẽ được di chuyển các chức năng của quá trình ghi danh người sử dụng hoàn toàn các trang web New York. | 282 Chapter 17 Performing a System Risk Assessment Federal Emergency Management Agency Hazards Research Lab at University of South Carolina http hazard db_registration Natural Disaster Hotspots A Global Risk Analysis http hazards hotspots Natural Disaster Reference Database http National Geophysical Data Center Natural Hazards Data seg hazard Natural Hazards Center All Hazards hazards resources web indices National Oceanic and Atmospheric Administration Central Library Qualitative Risk Assessment When you use relative concepts to determine risk exposure you are using qualitative risk analysis. Relative classification systems compare one component to another allowing you to rank a classification as high medium or low. It s useful to rank risk exposures caused by vulnerabilities so you can more easily make decisions on what to do about them. You can use the same qualitative risk exposure matrix listed in Table . A more simplified version of that table is shown in Table . Once you have established what the vulnerabilities are you need to determine their likelihood of being exploited and the severity of the determine the risk exposure by multiplying the severity of the loss by the likelihood. As a reminder Risk Exposure Likelihood x Impact R E P L x S L P L Probability of loss likelihood S L Severity of loss impact Performing a System Risk Assessment Chapter 17 283 Table Qualitative Risk Exposure Determination Table Impact Values S L Likelihood P L Low Medium High High Low Medium High Medium Low Medium Medium Low Low Low Low Table is very similar to Table in the NIST Special Publication 80030 Risk Management Guide for Information Technology Systems July 2002. Quantitative Risk Assessment Quantitative risk assessment associates loss with a .