Analysis Scoping Flashcards
1
Q
How can assumptions be managed?
A
Clearly defining and scoping an analysis.
2
Q
What is Analysis Scoping?
A
Clearly defining the scenario we wish to measure.
3
Q
Key asset example
A
Data on a lost laptop
4
Q
Threat vector
A
A method or approach (hacking, etc.)
5
Q
Threat event types (4)
A
Malicious
Error
Failure
Natural
6
Q
Threat Profiling
A
Describing threat communities based on consistent profiles.
7
Q
Risk Triad
A
Assets Threats Effects = Loss Event
8
Q
Loss types
A
Confidentiality
Integrity
Availability
9
Q
Parts needed to define a scenario…
A
Asset
Threat
Effect
Single sentence (Determine how much risk is associated with…)
10
Q
Scenario parsing
A
Breaking a scenario into multiple analyses. (Or combining scenarios)
11
Q
Fair is a risk _____ framework.
A
Fair is a risk analysis framework.
