riskassessmentreport-u.s.departmentofhousingandurban.docVIP

DEPARTMENT OF HOUSING AND URBAN DEVELOPMENT RISK ASSESSMENT TEMPLATE Version 1.0 April 2005 FINAL [SYSTEM NAME] [Organization] [DATE PREPARED] Prepared by: Preparing Organization  TABLE OF CONTENTS SYSTEM NAME RISK ASSESSMENT REVIEW/APPROVAL SHEET iii SYSTEM NAME RISK ASSESSMENT REVIEW SHEET iv SYSTEM NAME RISK ASSESSMENT CHANGE INFORMATION PAGE v 1.0 Introduction 1 1.1. Purpose 1 1.2. Scope 1 1.3. Testing Methods 2 1.4. Document Structure 2 2.0 Risk Assessment Methodology 4 2.1 Identifying System Assets 4 2.2 Analyzing System Threats 5 2.3 Analyzing System Vulnerabilities 10 3.0 System Description 12 3.1 System Description 12 3.2 System Name/Title 12 3.3 Responsible Organization 12 3.4 Information Contact(s)/System Owner 12 3.5 Assignment of Security Responsibility 12 3.6 Information Sensitivity 12 3.7 Mission Criticality 18 4.0 Risk Calculation 21 4.1 Impact 21 4.2 Likelihood of Occurrence 23 4.3 Risk Level 24 5.0 Risk Assessment Results 26 INDEX A-1  SYSTEM NAME RISK ASSESSMENT REVIEW/APPROVAL SHEET System Owner: Name: Signature Date Security Officer: Name: Signature Date Security Reviewer: Name: Signature Date SYSTEM NAME RISK ASSESSMENT REVIEW SHEET This Risk Assessment has been updated and approved on the following dates to account for the latest changes. This task will be completed at least annually. Approval Date Name of Security Officer Signature of Security Officer SYSTEM NAME RISK ASSESSMENT CHANGE INFORMATION PAGE Issue Date Pages Affected Description Original Date All Initial Draft Version Introduction A Risk Assessment is an important tool for Information Technology (IT) managers to use in evaluating the security of the IT systems that they manage, and in determining the potential for loss or h