Information Security Fundamentals, 2nd Edition

Appendix A  ◾  363

Sickness or other absence could render

some critical files inaccessible

A bomb threat could prevent access to

the building

Terrorist attack on local facilities could

affect access to company system and

information

Theft of equipment or other information

could affect ability to perform job

assignments

Insufficient cross-training of critical

procedures could affect the company’s

mission

Insufficient or missing desk procedures

could affect department’s ability to

complete tasks

Availability of information resources

controlled by a third party could affect

company processes

Rating Probable

Moderate

Rare

High

Medium

Low

Use

Matrix

Threat Likelihood ...