Harry & Mae Case Study Complete Solution

Question: #1341

For the Harry & Mae Case Study, complete the asset identification and valuation for Harry & Mae, Inc.

For the Harry & Mae’s Case Study:

Create a Risk Analysis table for the identified vulnerabilities and risks as shown in the sample.
For each of Harry & Mae’s critical assets, calculate the probability of each threat/vulnerability pair being exploited.
For each of Harry & Mae’s critical assets, determine the impact rating for each threat/vulnerability pair.
For each of Harry & Mae’s critical assets, calculate the risk exposure related to the identified vulnerabilities.
There should be a risk exposure value for each threat/vulnerability pair that you identified in the last assignment.

Sample Risk Matrix table:

Asset Name	Description	Asset Value (1 – low, 5 – high)	Vulnerabilities	Vulnerability Value (1 – low, 5 – high)	Threats	Likelihood Value (1 – low, 5 – high)	Risk Exposure (1 – low, 5 – high)
Personal Computers	Equipped with Hard Drives and floppy drives. Used by employees.	3- Medium – especially if sensitive information is stored on hard drive. (Dependent on the user and his/her data.)
LAN Server	Used by employees to store files and to run shared programs.	5- High – data loss would cost the agency significant effort to reproduce
E-mail	Used by employees for electronic communications and file transfer	3- Medium – e-mail enables the agency to communicate with other agencies

Assumptions:

Assumption one
Assumption two

[NOTE: This is an example provided to help the student understand the process. It is not complete on purpose. Make sure it contains sufficient detail to help the client understand their risks. Please remove this statement if you use this document for your assignment.]

Solution: #1320

Harry & Mae Case Study Complete Solution

•   relaxed password rules
•   The company uses a Web front end for all of its applications and workstations are capable of accessing them using Microsoft’s Internet Explorer   •   data may be lost when updating the web
•   data can be accessed by any unauthorized person using the workstation   4
&bu...