No Protection Strategy Very Much Somewhat Not At All Don’t Know

1 Security Awareness and Training 0 3 1 0

2 Security Strategy 1 1 1 0
3 Security Management 1 3 3 0
4 Security Policies and Regulations 0 0 4 0
5 Collaborative Security Management 0 2 2 0
6 Contingency Planning/Disaster Recovery 0 3 2 1
7 Physical Access Control 3 3 0 0
8 Monitoring and Auditing Physical Security 1 0 3 1
9 System and Network Management 0 1 7 3
10 Monitoring and Auditing IT Security 0 0 3 1
11 Authentication and Authorization 0 2 2 1
12 Vulnerability Management 0 0 3 2
13 Encryption 0 0 3 1
14 Security Architecture and Design 0 2 2 0
15 Incident Management 0 0 1 4
Spotlight
Yellow
Red
Yellow
Red
Yellow
Yellow
Yellow
Red
Yellow
Red
Yellow
Red
Yellow
Red
Red
 Probability Value

Productivity
Reputation

Financial

Safety
Fines
Impact Value
disclosure L M M M L L
0.33 0.66
0.66 0.66 0.33 0.33
Risk = Probability x Impact 0.22
0.44 0.44 0.22 0.11
modification H M M L L L
accidental 1.00 0.66 0.66 0.33 0.33 0.33
Risk = Probability x Impact 0.66 0.44 0.22 0.11 0.11
loss, destruction L H H L M L

0.33 1.00 1.00 0.33 0.66 0.33

Risk = Probability x Impact
interruption L L L L L L
0.33 0.33 0.33 0.33 0.33 0.33
Risk = Probability x Impact
disclosure H L L L L L
1.00 0.33 0.33 0.33 0.33 0.33
Risk = Probability x Impact
modification H M H H L L
deliberate 1.00 0.66 1.00 1.00 0.33 0.33

loss, destruction H H L M H L
1.00 1.00 0.33 0.66 1.00 0.33
Risk = Probability x Impact
interruption L L L M L L
0.33 0.33 0.33 0.66 0.33 0.33
Risk = Probability x Impact
disclosure L L L L L L
0.33 0.33 0.33 0.33 0.33 0.33
Risk = Probability x Impact
modification L L L L L L
accidental 0.33 0.33 0.33 0.33 0.33 0.33
Risk = Probability x Impact
loss, destruction L L L L L L
0.33 0.33 0.33 0.33 0.33 0.33
Risk = Probability x Impact
interruption L L L L L L
0.33 0.33 0.33 0.33 0.33 0.33
Risk = Probability x Impact
disclosure L L L L L L
0.33 0.33 0.33 0.33 0.33 0.33
Risk = Probability x Impact
modification H H H H L L
deliberate 1.00 1.00 1.00 1.00 0.33 0.33
Risk = Probability x Impact
loss, destruction H H H H L L
1.00 1.00 1.00 1.00 0.33 0.33
Risk = Probability x Impact
interruption L M H M L L
0.33 0.66 1.00 0.66 0.33 0.33
Risk = Probability x Impact

Probability
H 1.00
M 0.66
L 0.33

Impact Value
H 1.00
M 0.66
L 0.33

Risk Exposure = Probability x Impact Value