Risk analysis management

One of the most important first steps to risk management and implementing is risk assessment.
You are required to perform a risk assessment on one particular IT system of your choice. You
can either follow a qualitative or quantitative method (select the methodology based on
assessment needs). Before progressing with the RA, you need to complete two preliminary
actions:

1. Define the assessment.
2. Review previous findings if available

Then start preforming the risk assessment in detail as it has been explained to you during the
lectures (chapter 5 and chapter 6)

1. Identify the management structure (optional)
2. Identify assets and activities to address.
3. Identify and evaluate relevant threats.
4. Identify and evaluate relevant vulnerabilities.
5. Identify and evaluate relevant countermeasures.
6. Evaluate risks.
7. Develop recommendations to mitigate risks.