Benchmarking Categories Selecting Best practices Barriers to benchmarking Baselining What is it? Difference from external benchmarking Measurements/Metrics Articles discussed around issues with metrics Metrics reported vs. Metrics executives care about Communication issues Audience macro vs. micro – Business alignment Chapter 8 Risk (Identify and Assess) – Risk Mgmt Risk Identification Assets Inventory and other – Attributes are not the same across all Classifying and Categorizing Asset Valuation (Goal) Prioritizing Assets Threat Identification Vulnerability Assessment Risk Assessment Likelihood x Value of Asset Current Controls + Uncertainty – Qualitative Risk Analysis Quantitative Risk Analysis Single Loss Expectancy Annualized Rate of Occurrence Annual Loss Expectancy
Benchmarking Categories Selecting Best practices Barriers to benchmarking Baselining What is it? Difference from external benchmarking Measurements/Metrics Articles discussed around issues with metrics Metrics reported vs. Metrics executives care about Communication issues Audience – macro vs. micro Business alignment Chapter 8 – Risk (Identify and Assess) Risk Mgmt Risk Identification Assets – Inventory and other Attributes are not the same across all Classifying and Categorizing Asset Valuation (Goal) Prioritizing Assets Threat Identification Vulnerability Assessment Risk Assessment Likelihood x Value of Asset – Current Controls + Uncertainty Qualitative Risk Analysis Quantitative Risk Analysis Single Loss Expectancy Annualized Rate of Occurrence Annual Loss Expectancy
Assessment2_StudyGuide.docx