+1 862 207 3288 The task is to create a risk model for a IT company. A number of files will be uploaded to help you.
The “Assignment data” file provides the asset register, raw risk data, crime statistic and “Group risk list”.
These are to used with the “Threat analysis sheet” to create the risk model.
You are free to make your own assumptions about the IT company, as long as it is relevant to the task. Any threat that is not relevant to the
scenario can be disregarded.
The “Format of assignment” and “HB167” provides a guideline for how it should be presented.
Remember to include the “Threat analysis sheet” in the model.
STATE POLICE SERVICE
MONTHLY REPORTED CRIME STATISTICS: 2003/04
EAST METROPOLITAN DISTRICT
Year-to-date
OFFENCE Jul-03 Aug-03 Sep-03 Oct-03 Nov-03 Dec-03 Jan-04 Feb-04 Mar-04 Apr-04 May-04 Jun-04 Total Clearance Rate %
Murder – – 1 – – – – – – – – – 1 100.0
Atempted Murder – 1 2 – – – – 1 – – – – 4 100.0
Manslaughter – – 1 – – – – – – – – – 1 200.0
Driving Causing Death – 1 – – – – – – 1 – – – 2 100.0
Aggravated Sexual Asault 8 4 3 13 9 14 5 22 3 17 16 10 124 128.2
Non-Aggrav Sexual Assault 15 16 5 14 14 8 4 31 4 11 22 1 145 98.6
Aggravated Assault 15 29 22 31 24 26 27 24 21 26 23 26 294 83.3
Non-Aggravated Assault 55 56 70 65 73 66 66 74 93 59 65 66 808 85.1
Assault Police Officer 1 4 1 3 3 4 7 7 3 6 4 2 45 100.0
Threatening Behaviour 12 21 22 16 17 22 20 27 34 26 18 17 252 77.4
Deprivation/Liberty 3 4 2 2 – – 6 2 4 4 5 2 34 82.4
Aggravated Robbery (Firearm) 1 3 2 – 2 – – – – 2 – – 10 20.0
Aggravated Robbery (Other) 10 9 10 5 3 8 1 3 1 2 6 9 67 46.3
Non-Aggravated Robbery 8 7 9 4 9 8 8 8 4 5 6 7 83 36.1
Total Offences/Person 128 155 150 153 154 156 144 199 168 158 165 140 1870 84.2
Burglary (Dwelling) 235 248 264 248 324 343 308 252 265 329 318 336 3470 12.4
Burglary (Non-Dwelling) 161 166 179 200 181 172 191 157 180 169 154 165 2075 11.2
Steal Motorised Vehicle 76 62 80 65 64 76 115 81 52 45 64 56 836 24.8
Steal Other Vehicle 14 11 13 6 14 11 11 7 14 18 11 18 148 20.3
Theft 526 580 548 650 534 525 661 552 599 578 617 723 7093 17.8
Receiving/Illegal Use 1 3 2 3 – 7 2 4 4 1 3 1 31 125.8
Fraud 38 27 33 34 26 26 47 37 127 55 45 33 528 66.9
Arson 7 4 9 6 8 11 20 10 12 5 8 6 106 19.8
Graffiti 41 60 42 35 82 70 38 32 38 29 42 42 551 10
Property Damage 225 216 244 255 224 227 271 234 209 212 206 223 2746 19.3
Total Property Offences 1324 1377 1414 1502 1457 1468 1664 1366 1500 1441 1468 1603 17584 18.0
Breach of Restraint 10 23 16 17 18 24 22 21 28 23 16 16 234 93.2
Drugs (Traffic) 9 15 9 3 18 5 12 6 9 15 10 7 118 96.6
Drugs (Possess) 53 103 74 60 82 67 87 59 85 106 92 111 979 86.9
Total Other Offences 72 141 99 80 118 96 121 86 122 144 118 134 1331 88.9
Total All Offences 1524 1673 1663 1735 1729 1720 1929 1651 1790 1743 1751 1877 20785 28.5
Threat Actor Threat Actor Motivation Threat = Intent x Capability
Threat Level Ranking
Intent = Desire x Confidence
Intent
Resources Knowledge Desire Confidence Capability = Resources x Knowledge
Capability Low Expressed Determined
Extensive Medium Very High
Extreme
Capability Intent Moderate Low High
Very High
Low Low Medium High
Threat Level
• Introduction
– What are you reporting and why?
• Review of risk model
– Show you have researched models – Discuss pros/ cons
– Show what you are going to use
– Justify in terms of the context and supplied data
• Context
– Internal / External / SRM context (HB167 Ch 3)
• Risk Identification
– List of risks
– Threat / criticality / vulnerability analysis (HB167 Ch 4)
• Risk Analysis
– Likelihood x Consequence (HB167 Ch 5)
• Evaluate and treat
– (HB167 Ch 6 and 7)
• Conclusion
