CHAPTER 8: ASSET VALUATION
The asset owner is usually also responsible for valuing the information asset.
The successful exploitation of a vulnerability by a threat will have an impact on the asset’s availability, confidentiality or integrity. This may have consequences for the business, in terms of its actual operations, or from a compliance angle, or in relation to a contractual requirement. A single threat could exploit more than one vulnerability and each exploitation could have more than one type of impact. These impacts should all be identified. The potential business harm that might result from each of these identified impacts should then be estimated.
The value of the asset should, for information security management purposes, be the ...
Get Risk Assessment for Asset Owners now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
