The Security Risk Assessment Handbook, 2nd Edition

Security Risk Assessment Approaches  ◾  445

© 2011 by Taylor & Francis Group, LLC

Table13.3  Qualitative Values

Level Attempt Exploit Impact

1 Likely Easy Exposure or loss of proprietary

information

Loss of integrity of critical information

System disruption

Major structural damage

Loss of physical access control

Exposure or loss of sensitive information

Grave danger to building occupants

2 Conceivable Moderate Major system damage

Significant structural damage

Risks to access controls

Potential exposure to sensitive

information

Serious danger to building occupants

3 Improbable Difficult Minor system damage or exposure

Some structural damage

Reduced access control ...