Review Section 2.2 and Figure 2.2 in Mead & Woody (2017). Research probability and impact matrices and select one to apply in Action Item 3. In a 2-1/2-page paper, develop a model risk assessment using a real or fictional system or organization. Develop an introduction explaining the system or organization. Develop 2 – 4 threats and explain them Using the probability and impact matrix, assess the threats and develop a conclusion. From the mission perspective, risk is defined as the probability of mission failure (i.e., not achieving key objectives). Mission risk aggregates the effects of multiple conditions and events on a system’s ability to achieve its mission. Mission risk analysis is based on systems theory.7 The underlying principle of systems theory is to analyze a system as a whole rather than decompose it into individual components and then analyze each component separately [Charette 1990]. In fact, some properties of a system are best analyzed by considering the entire system, including the following: Because mission risk analysis is based on system theory, the term systemic risk can be used synonymously with mission risk. The term mission risk is used throughout this chapter. • Influences of environmental factors • Feedback and nonlinearity among causal factors • Systemic causes of failure (as opposed to proximate causes) • Emergent properties

    Scheme Safeguard

    This essay looks into a exemplification of a scheme in a attainments establishment such as universities and colleges. The weighty employment of the scheme is to succor the establishment superintendence to manipulate the work and repress establishment marks restraint each and integral scholar in the establishment.  The scholars accept been ardent the simply the sufferance to light the history barring they do referable attributoperative attributoperative attributoperative attributoperative attributoperative attributoperative accept the power to remodel the history. The disquisitionrs accept been ardent the sufferance to light and bring-abquenched changes to the history. However, they are recognized to accept appropinquation simply to the classes that they disquisition. Again, they accept to attempt evacuation from the apex superintendence of the establishment whenever they nonproduction to bring-abquenched any changes in the scheme. The disquisitionrs are obligatory restraint repressing their login details and nobody else should be in tenure of them.


    This scheme is faced with various risks and referable attributoperative attributoperative attributoperative attributoperative attributoperative attributoperative original prophylactic controlethought measures are smitten, there are excellent chances of a prosperous assault on the scheme. The scheme is inferior the intimidation of offenders such as chopers who impartial nonproduction to consume the scheme or accept vindictive motives. A choper is anyseparate who is operative to appropinquation referableice in a scheme externally authorization (Shaikh & Haider, 2011). In fact of prosperous choping into the scheme, the choper obtain be operative to appropinquation intimate referableice of the scholars. They influence as well-behaved-behaved be operative to bring-abquenched changes in the scheme if they manipulate to chop the admin representation. Safeguard measures such as passwords should be truthd enclose the scheme from chopers.

    Social engineering is another intimidation that is most mitigated to like the scheme. This is a scheme that is distributed by a catholic population of herd and hence it influence be a part to vestige entire operations and activities that are happening in the scheme at any ardent duration. Social engineering is where a special psychologically manipulates the truthrs so as to bring-abquenched appropinquation to referableice that is intimate in the scheme. There are excellent chances separate or various employees may fentire into the pitfwhole and influence themselves giving quenched the login credentials. It obtain seize duration to unmask vindictive activities unintermittently the scheme has been confused.

    Malware is a imperilled intimidation to the safeguard of this scheme. Malware is an collision that has been intended to bypass some of the safeguard measures that accept been set-dpossess in establish to repress the scheme enclose (Stallings et al., 2012). An separate may flow to constitute a malware restraint possess point or a clump of scholars who probably elaborate in the selfselfsame establishment may flow to crew up to lay-disclosed a malware that obtain furnish them appropinquation to the scheme. It’s altogether sick owing there are herd who are abandoned to the lay-openment of malware and they normally retail them in disclosed bargain. A malware may furnish the scholar appropinquation to the super admin representation in the scheme.

    Toperative 1- Probability-Impact Matrix

    ImpactMinor Moderate Weighty ExtremeProbabilityUnmitigated Malware ModerateMitigated Hackers Very MitigatedSocial engineering


    Integral scheme is prseparate to the safeguard intimidations and hence it is the service of the dignitary to bring-abquenched confident that the scheme has equitable safeguard measures. Following are some recommendations that would succor repress the scheme enclose. Encourage entire the truthrs to truth a restrainttified password which may be impenetrable. It is besides weighty to repress on changing the passwords referable attributoperative attributoperative attributoperative attributoperative attributoperative attributoperative simply restraint the truthrs barring besides restraint the admin representation (Yeh & Chang, 2007). It’s advisoperative to delete the super dignitary representations which furnish an assaulter entire sufferances unintermittently the scheme is confused. Educate the scheme truthrs on the peel of referableice that they may distribute and the separate that they are referable attributoperative attributoperative attributoperative attributoperative attributoperative attributoperative deemed to distribute.


    Shaikh, F. B., & Haider, S. (2011, December). Safeguard intimidations in shade computing. In Internet technology and enclosed transactions (ICITST), 2011 interdiplomatic discourse restraint (pp. 214-219). IEEE.

    Stallings, W., Brown, L., Bauer, M. D., & Bhattacharjee, A. K. (2012). Computer safeguard: principles and habit (pp. 978-0). Pearson Education.

    Yeh, Q. J., & Chang, A. J. T. (2007). Intimidations and countermeasures restraint referableice scheme safeguard: A cross-industry examine. Referableice & Superintendence, 44(5), 480-491.