FITSI MANAGER FEDERAL IT SECURITY
INSTITUTE
SP 800-30 Threat Likelihood - Adversarial - ANSWERS-Very High
96-100
10
Adversary is almost certain to initiate the threat event.
High
80-95
8
Adversary is highly likely to initiate the threat event.
Moderate
21-79
5
Adversary is somewhat likely to initiate the treat event.
Low
5-20
2
Adversary is unlikely to initiate the threat event.
,Very Low
0-4
0
Adversary is highly unlikely to initiate the threat event.
SP 800-30 EXAMPLES OF ADVERSE IMPACTS - ANSWERS-HARM TO OPERATIONS
- Inability to perform current missions/business functions.
- In a sufficiently timely manner.
- With sufficient confidence and/or correctness.
- Within planned resource constraints.
- Inability, or limited ability, to perform missions/business functions in the future.
- Inability to restore missions/business functions.
- In a sufficiently timely manner.
- With sufficient confidence and/or correctness.
- Within planned resource constraints.
- Harms (e.g., financial costs, sanctions) due to noncompliance.
- With applicable laws or regulations.
- With contractual requirements or other requirements in other binding
agreements (e.g., liability).
- Direct financial costs.
- Relational harms.
- Damage to trust relationships.
, - Damage to image or reputation (and hence future or potential trust
relationships).
HARM TO ASSETS
- Damage to or loss of physical facilities.
- Damage to or loss of information systems or networks.
- Damage to or loss of information technology or equipment.
- Damage to or loss of component parts or supplies.
- Damage to or of loss of information assets.
- Loss of intellectual property.
HARM TO INDIVIDUALS
- Injury or loss of life.
- Physical or psychological mistreatment.
- Identity theft.
- Loss of Personally Identifiable Information.
- Damage to image or reputation.
HARM TO OTHER ORGANIZATIONS
- Harms (e.g., financial costs, sanctions) due to noncompliance.
- With applicable laws or regulations.
- With contractual requirements or other requirements in other binding
agreements.
- Direct financial costs.
- Relational harms.
INSTITUTE
SP 800-30 Threat Likelihood - Adversarial - ANSWERS-Very High
96-100
10
Adversary is almost certain to initiate the threat event.
High
80-95
8
Adversary is highly likely to initiate the threat event.
Moderate
21-79
5
Adversary is somewhat likely to initiate the treat event.
Low
5-20
2
Adversary is unlikely to initiate the threat event.
,Very Low
0-4
0
Adversary is highly unlikely to initiate the threat event.
SP 800-30 EXAMPLES OF ADVERSE IMPACTS - ANSWERS-HARM TO OPERATIONS
- Inability to perform current missions/business functions.
- In a sufficiently timely manner.
- With sufficient confidence and/or correctness.
- Within planned resource constraints.
- Inability, or limited ability, to perform missions/business functions in the future.
- Inability to restore missions/business functions.
- In a sufficiently timely manner.
- With sufficient confidence and/or correctness.
- Within planned resource constraints.
- Harms (e.g., financial costs, sanctions) due to noncompliance.
- With applicable laws or regulations.
- With contractual requirements or other requirements in other binding
agreements (e.g., liability).
- Direct financial costs.
- Relational harms.
- Damage to trust relationships.
, - Damage to image or reputation (and hence future or potential trust
relationships).
HARM TO ASSETS
- Damage to or loss of physical facilities.
- Damage to or loss of information systems or networks.
- Damage to or loss of information technology or equipment.
- Damage to or loss of component parts or supplies.
- Damage to or of loss of information assets.
- Loss of intellectual property.
HARM TO INDIVIDUALS
- Injury or loss of life.
- Physical or psychological mistreatment.
- Identity theft.
- Loss of Personally Identifiable Information.
- Damage to image or reputation.
HARM TO OTHER ORGANIZATIONS
- Harms (e.g., financial costs, sanctions) due to noncompliance.
- With applicable laws or regulations.
- With contractual requirements or other requirements in other binding
agreements.
- Direct financial costs.
- Relational harms.
