Assignment 1: Build a Risk Register
Due September 12, 2026 at 11:59pm · 50 points
Instructions
- Choose a small fictional organization and describe it in three sentences.
- Identify five assets and, for each, list one threat, one vulnerability, and a qualitative risk rating (high/medium/low).
- For one of the five, perform a quantitative analysis: state the asset value, exposure factor, SLE, ARO, and ALE.
- Recommend one control per risk and state whether it is preventive, detective, or corrective, and whether it is administrative, technical, or physical.
- Name the risk response you chose for each (mitigate, transfer, avoid, accept) and justify it in one sentence.
- Submit as a single document of no more than two pages.