IS3110 Lab #2: Assessment Worksheet

Align Risk, Threats, & Vulnerabilities to COBIT P09 Risk Management Controls

Student Name: _____________________________________________________________

1. From the identified threats & vulnerabilities from Lab #1 –
(List At Least 3 and No More than 5),
High/Medium/Low Nessus Risk Factor Definitions for Vulnerabilities)
a.
b.
c.
d.
e.

2. For the above identified threats and vulnerabilities, which of the following COBIT P09 Risk
Management control objectives are affected?
• PO9.1 IT Risk Management Framework
• PO9.2 Establishment of Risk Context
• PO9.3 Event Identification
• PO9.4 Risk Assessment
• PO9.5 Risk Response
• PO9.6 Maintenance and Monitoring of a Risk Action Plan

3. From the identified threats & vulnerabilities from Lab #1 –
(List At Least 3 and No More than 5), specify whether the threat or vulnerability impacts confidentiality – integrity – availability:
Confidentiality Integrity Availability
a.
b.
c.
d.
e.

4. For each of the threats and vulnerabilities from Lab #1
(List at Least 3 and No More than 5) that you have remediated, what must you assess as part of your overall COBIT P09 risk management approach for your IT infrastructure?

5. For each of the threats and vulnerabilities from Lab #1 –
(List at Least 3 – No More than 5), assess the risk impact or risk factor that it has on your organization in the following areas:
a. Threat or Vulnerability #1: o Information – o Applications – o Infrastructure – o People –

b. Threat or Vulnerability #2: o Information – o Applications – o Infrastructure – o People –

c. Threat or Vulnerability #3: o Information – o Applications – o Infrastructure – o People –

d. Threat or Vulnerability #4: o Information – o Applications – o Infrastructure – o People –

e. Threat or Vulnerability #5:
o