Analyzing Risks, Threats, Weaknesses and Controls/Countermeasures is a complex process

Introduction: Analyzing Risks, Threats, Vulnerabilities/Weaknesses and Controls/Countermeasures is a complex process.  To make this easier, I am asking students to work in groups to discuss the Project scenario Weaknesses, and create a list of corresponding Risks, Threats, and Countermeasures.

Expectations: After reviewing the Project information, the group should evaluate the Weaknesses listed and then identify the Risks, Threats, and Countermeasures.  .

Step #1: using the Group Discussion board, agree on on how members will participate in completing the assignment. The group should agree on one person to lead the group, monitor the discussion threads and encourage group members to post information.

Step #2: Each member identifies 4 or more Weaknesses (as found in the Project information) he/she would like to analyze and post that information to the “Weakness” Discussion thread. NO other student should use Weaknesses already identified by another student – the earlier you post, the better.   Feel free to add more Weaknesses as they are found BUT they must be related to the information provided in the Project information document – do not make up weaknesses that are not addressed in the Project information document.

Step #3:  Each member uses the Weaknesses he/she selected and posts Threats (that can exploit the Weaknesses). Other members of the team should look for additional threats. Group members should discuss and update the Threats column on the Project worksheet.

Step #4: Each member uses the Weaknesses/Threats he/she selected and posts Risks (that can generate loss should the Threat exploit the Weakness). Other members of the team should look for additional Risks. Group members should discuss and update the Risks column on the Project worksheet.

Step #5: Each member uses the Weaknesses/Threats/Risks he/she selected and posts Countermeasures (that can mitigate the Risks). Other members of the team should look for additional Countermeasures.  Group members should discuss and update the Countermeasures column on the Project worksheet.