15. The Model Assess Perform Risk Assessment & Gap Analysis Establish Areas and Vectors Determine Targets Change Align Areas and Vectors to Acceptable Levels Confirm results New Security Level Maintain Periodically Assess Update Stay Current
16. The Model – Likelihood vs Consequence Moderate Risk High Risk Low Risk Moderate Risk Likelihood Consequence
17. The Model – Probability vs Impact Probability Impact 4 = Very Likely 4 = Severe Impact 3 = Likely 3 = Major Impact 2 = Not Likely 2 = Minor Impact 1 = Beyond Unlikely 1 = No Impact
18. The Model – Probability vs Impact Vector Probability Internet, Wireless (Open) 4 = Very Likely Internet, Wireless (Password) 3 = Likely Internet, Wireless (Authenticated) 2 = Not Likely No Outside Connection 1 = Beyond Unlikely
19. The Model – Probability vs Impact Impact 1 = No Impact 2 = Minor Impact 3 = Major Impact 4 = Severe Impact Public View Ok Tarnished Recoverable Lost Confidence Environmental Ok Damaged Broken Destroyed Personnel Ok First Aid, Medical Treatment Hospitalization Fatality Production No Loss Minor Loss Moderate Loss Major Loss
310 Square Mile site in southwest SC, on border of GA, along the Savannah River. Used to be major production site for nuclear weapons program. Now, mostly cleanup. Some limited life component processing (Tritium); looking forward to future missions for the site, like energy park, modular reactors, hydrogen fuels, etc…
A Vulnerability in human terms – example: a guy who does not exercise control over his desire to pursue women other than his wife The Risk here is that his wife will discover his actions and cause him irreparable harm; what is the likelihood (very likely) and severity (slow and painful death; or worse)