Task A - Activity 1 Template: Risk assessment of the networked system
Risk severity matrix
Very likely Medium High Extreme
Likely Low Medium High
Probability of threat Unlikely Low Low Medium
occurring Minor Moderate Major
Size of the loss
financial, reputational, operational, legal
Assessment
Threat number. 1
Threat title. Attacks via the Wi-Fi
Probability. Very Likely
Potential size of Major
loss / impact level.
Risk severity. Extreme
Explanation of the Hackers may use automated scanning software to find ways to gain
threat in context. unauthorised access to the network. This is dangerous as the Wi-Fi can be
connected by mobile devices.
This will lead to financial, reputational and operational loss for BCTAA.
Threat number. 2
Threat title. Attacks via remote access
Probability. Very Likely
Potential size of Major
loss / impact level.
Risk severity. Extreme
Explanation of the Hackers may use automated scanning software to find vaulenables in the
threat in context. network allowing them to gain unauthorised access to the network. Other
ways attacks can access is by eavesdropping on the remote access user to
gain their secrets.
This will lead to financial, reputational and operational loss for BCTAA.
Threat number. 3
, Threat title. Attack on clients information
Probability. Very Likely
Potential size of Major
loss / impact level.
Risk severity. Extreme
Explanation of the With the company BCTAA being in contact with their clients highly
threat in context. confidential information they need to be careful as a Hacker can use
scanners to check for valunables on the network and steal the client’s
confidential information.
This will lead to financial, legal and reputational loss for BCTAA.
Threat number. 4
Threat title. Misconfigured patch panel- Main switch
Probability. Likely
Potential size of Major
loss / impact level.
Risk severity. High
Explanation of the An attacker can swap the Cat6 cable for another cable and gain direct
threat in context. unauthorised access to the network and will be able to have full control of
the network.
This will lead to financial, reputational, operational and legal loss for BCTAA.
Threat number. 5
Threat title. Misconfigured Firewall
Probability. Likely
Potential size of Major
loss / impact level.
Risk severity. High
Explanation of the If the Firewall is not configured and maintained correctly the firewall will
threat in context. allow potentially dangerous packets to enter the network and could lead to
an overload in the network and it crashing.
This will lead to financial, reputational and legal loss for BCTAA.
Threat number. 6
Threat title. Misconfigured controlled doors
Probability. Likely
Potential size of Major
loss / impact level.