2022-06-16 12:46:50 +02:00
|
|
|
\section{Part 3: Quantitative Risk Assessment}
|
2022-06-23 17:29:05 +02:00
|
|
|
|
2022-06-27 13:59:59 +02:00
|
|
|
\subsection{Tabelle}
|
|
|
|
|
|
|
|
|
|
Siehe Tabelle \myref{tab:Quantitative Assessment}.
|
|
|
|
|
|
2022-06-23 17:29:05 +02:00
|
|
|
\begin{table}[ht]
|
|
|
|
|
\centering
|
2022-06-27 13:59:59 +02:00
|
|
|
\begin{adjustbox}{angle=90, height=0.95\textheight}
|
2022-06-23 17:29:05 +02:00
|
|
|
\small
|
2022-06-27 13:59:59 +02:00
|
|
|
\begin{tabular}{l|l|l|r|r|r|r|r|r}
|
|
|
|
|
\textbf{Asset} & \textbf{Security Issue} &\textbf{Countermeasure} & \textbf{ACS} & \textbf{EF} & \textbf{SLE} & \textbf{ARO} & \textbf{ALE} & \textbf{Benefit} \\
|
2022-06-23 17:29:05 +02:00
|
|
|
\hline
|
2022-06-27 13:59:59 +02:00
|
|
|
Database Server & Diebstahl der Daten aus Datenbank & IT-Department & 500.000€ & 50\% & 250.000€ & 0.9 & 225.000€ & \\
|
2022-06-23 17:29:05 +02:00
|
|
|
\hline
|
2022-06-27 13:59:59 +02:00
|
|
|
& Löschen der Datenbank & IT-Department & 500.000€ & 50\% & 250.000€ & 0.9 & 225.000€ & \\
|
2022-06-23 17:29:05 +02:00
|
|
|
\hline
|
2022-06-27 13:59:59 +02:00
|
|
|
& Diebstal des Servers & Office Security & 1.000.000€ & 100\% & 500.000€ & 0.0001 & 50€ & \\
|
2022-06-23 17:29:05 +02:00
|
|
|
\hline
|
2022-06-27 13:59:59 +02:00
|
|
|
Client DB & Verschlüsselung der Datenbank & IT-Department & 120.000€ & 100\% & 60.000€ & 0.001 & & \\
|
2022-06-23 17:29:05 +02:00
|
|
|
\hline
|
2022-06-27 13:59:59 +02:00
|
|
|
Website & Darstellung falscher Daten & IT-Department & 10.000€ & 10\% & 1.000€ & 0.1 & 100€ & \\
|
2022-06-23 17:29:05 +02:00
|
|
|
\hline
|
2022-06-27 13:59:59 +02:00
|
|
|
& Kontakt Formular & IT-Department & 10.000€ & & & & & \\
|
2022-06-23 17:29:05 +02:00
|
|
|
\hline
|
2022-06-27 13:59:59 +02:00
|
|
|
Online Shop & Denial of Service & Anti DoS Lösung & 6.000€ & & & & & \\
|
2022-06-23 17:29:05 +02:00
|
|
|
\hline
|
2022-06-27 13:59:59 +02:00
|
|
|
& Man in the middle & Verschlüsselung & 2.000€ & & & & & \\
|
2022-06-23 17:29:05 +02:00
|
|
|
\hline
|
2022-06-27 13:59:59 +02:00
|
|
|
Entertainment & Technischer Defekt & Teurere Hardware & 10.000€ & & & & & \\
|
2022-06-23 17:29:05 +02:00
|
|
|
\hline
|
2022-06-27 13:59:59 +02:00
|
|
|
& Navigation Defekt & Extensive Testing & 10.000€ & & & & & \\
|
2022-06-23 17:29:05 +02:00
|
|
|
\end{tabular}
|
|
|
|
|
\end{adjustbox}
|
2022-06-27 13:14:04 +02:00
|
|
|
\caption{Quantitative Assessment}
|
|
|
|
|
\label{tab:Quantitative Assessment}
|
|
|
|
|
\end{table}
|
2022-06-27 13:59:59 +02:00
|
|
|
|
|
|
|
|
\subsection{Countermeasure Beschreiben}
|
|
|
|
|
|
