лаба_10 / лаб_10_14_4

Full Asset Report

50,000

321

5 10 15 20 25 30 35 40 45 50 (x 1,000)

Dollars

Figure 8.2

2.2.3Applications

2

Figure 7.3

This information about replacement costs is presented below as a barchart.

50,000 345

Dollars

Figure 8.3

2.2.4Communications Hardware

Figure 7.4

This information about replacement costs is presented below as a barchart.

50,000

Dollars

Figure 8.4

2.2.5Communications Software

Full Asset Report

Figure 7.5

This information about replacement costs is presented below as a barchart.

25,000 EWQ

Dollars

Figure 8.5

2.2.6Databases

Figure 7.6

This information about replacement costs is presented below as a barchart.

3

7,500

456

Dollars

Figure 8.6

2.2.7Documentation

Figure 7.7

This information about replacement costs is presented below as a barchart.

10,000 OI

Dollars

Full Asset Report

Figure 8.7

2.2.8Hardware

Figure 7.8

This information about replacement costs is presented below as a barchart.

25,000 HARD

Dollars

Figure 8.8

2.2.9Office Equipment

Figure 7.9

This information about replacement costs is presented below as a barchart.

4

7,500

QWE

5,000

QWE

Dollars

Figure 8.9

The percentage of the total replacement cost for this category that is contributed by each asset is indicated in the following diagram.

Full Asset Report

QWE (40.0%)

QWE (60.0%)

Figure 9.9

2.2.10Personnel

Figure 7.10

This information about replacement costs is presented below as a barchart.

2,000 PERS

Dollars

Figure 8.10

2.2.11System Software

This information about replacement costs is presented below as a barchart.

5

7,500 ELPM EPLEASE

Dollars

Full Asset Report

Figure 8.11

2.2.12Utilities

Figure 7.12

3.2 INCIDENTS INVOLVING EACH THREAT

Each Incident is defined as triple of the form <threat, loss category, asset category> . By doing things this way it is possible to separate the various forms of loss that a given threat may cause to the enterprise as the result of acting on the same asset category.

The sections below look at each threat and indicate the various incidents that were associated with it in the analysis. For each incident, a table is presented (FIGURES 13.1, 13.2, ...) indicating its SLE and ALE (where the ALE is generated by multiplying the SLE for the incident by the AFE of the threat). The overall ALE for a threat is the sum of the ALEs for each of the associated incidents. This is shown as the total of the third column. The percentage of this total represented by the ALE for each incident is indicated in the fourth column.

Also shown for each threat is a barchart that provides a visual presentation of the relative magnitudes of the ALE for each incident. These are shown as FIGURES 14.1, 14.2, ....

Piecharts are then also provided that indicate the percentage of each threat ALE that is accounted for by each incident that is used in its calculation.

3.2.1Blackmail - AFE: 0.05

The various incident classes associated with this threat are shown in the following table:

20

Direct, Personnel

Dollars

Figure

16.1Blackmail - SLE's

3.2.2Budget Loss - AFE: 0.50

The various incident classes associated with this threat are shown in the following table:

3.2.3Cold/Frost/Snow - AFE: 5.00

The various incident classes associated with this threat are shown in the following table:

3.2.4Data Destruction - AFE: 20.00

The various incident classes associated with this threat are shown in the following table:

Figure 13.4

5,000,000 Disclosure, Databases

Dollars