Answer Happy

2. Limit your assessment to two possible scenarios: Penetration of the system by a phishing attack and Penetration of the system from another MSU domain. Use the NIST model shown below to assess the cybersecurity risks. Follow each of the above scenario using the model shown below in figure 3. (25 Points)
Threat Source intates Threat Event exploits Vulnerability causing Adverse Impact with with Likelihood of Characteristics Inilation (eg. Capability Inters, and Targeting for Adversand Threats) With Likelihood of Success with Sequence of actions, activities or scenarios with Degree with Severity In the context of Predisposing Conditions with Risk as a combination of mpact and Likelihood producing with Pervasiveness Inputs from Risk Framing Step (Risk Management Strategy or Approach) Influencing and Potentially Modifying Key Risk Factors Security Controls Plannedí teplomerad ORGANIZATIONAL RISK To organizational operations (mission, kunctions, image, reputation), organization assets, individuals, other organizations, and the Nation with Effectiveness FIGURE 3: GENERIC RISK MODEL WITH KEY RISK FACTORS