From the course: Complete Guide to Open Source Security

Unlock the full course today

Join today to access over 24,500 courses taught by industry experts.

Preparing your risk context

Preparing your risk context

- [Sam] We're in Risk Management, Asset Risk Management, and the first thing we need to do to activate our risk management system is to configure our risk context. At the top right, we'll expand Settings, and we'll start with Classification Types. We'll add two types, (keyboard clacking) Financial Impact and Likelihood. (keyboard clacking) we could add additional impact types, such as reputation, but we'll just keep this simple. We'll now create our risk classifications. We're going to be using a three-by-three matrix for our risk calculations. So we need to create settings for the three levels of High, Medium, and Low for both Financial and Likelihood types. So we'll start with Financial Impact and High, and let's set our criteria as High impact is a loss of funds or business of greater than $100,000, and we'll set the value for that to be 3. And we'll add Financial Impact, Medium. Medium impact is a loss of funds or business in the range 10,000 to 100,000. And we'll put the…

Contents