1. System administration Risk Management Risk Definition Risk Strategies Risk Assessments

2. Managing Risks This activity is part of the TQM model The task is part of evaluating assets and the related threats There are to types of risks: –Internal risks –External risks

3. Concepts Associated with Defining Risks Risk –A threat to some object that has i value External Risk –Comming from other system / external enviroment Internal Risk –Project is missing importent ressources Risk Attributes –Probability of occurrence Risk magnitude indicator –High, Significant, Moderate, Minor, Low –Numbered 5 to 1

4. Risk Strategies Risk acceptance –Live with it Risk Avoidance –Reorganize to eliminate the risk Direct mitigation –Reduce the probability or impact Risk contingency –Have a ’Plan B’ Risk transfer –Sub-contract the risk

5. Risk planning Descripti on of the risk Costs/ impacts 1(Low) – 5(High) Pos- sibility 1(Low) – 5(High) ImpactsIndica- tors Mitigra- tion strategy Contin- gencyplan Minor natural disasters 51Damage to HW and SW Rain Storm Remote Backup Re- installation plan Virus and worms 43System stop Slow systems Malfunc tions System log entries Slow systems Virus protec- tion program- mes Firewall Safe backup Re- installation plan

6. Risk Strategies Total Risk = Priority Total Risk (priority) = Costs/ impacts X Possibility Deal with the high risk first (high priority) Remember to plan with security risk management