1. System administration Risk Management
Risk Definition
Risk Strategies
Risk Assessments

2. Managing Risks This activity is part of the TQM model
The task is part of evaluating assets and the related threats
There are to types of risks:
Internal risks
External risks

3. Concepts Associated with Defining Risks
A threat to some object that has i value
External Risk
Comming from other system / external enviroment
Internal Risk
Project is missing importent ressources
Risk Attributes
Probability of occurrence
Risk magnitude indicator
High, Significant, Moderate, Minor, Low
Numbered 5 to 1

4. Risk Strategies Risk acceptance Live with it Risk Avoidance
Reorganize to eliminate the risk
Direct mitigation
Reduce the probability or impact
Risk contingency
Have a ’Plan B’
Risk transfer
Sub-contract the risk

5. Risk planning Description of the risk Costs/ impacts 1 Low – 5 High
Pos-sibility
1 Low – 5 High
Total
Impacts
Indica-tors
Mitigra-tion strategy
Contin-gencyplan
Minor natural disasters 5 1
Damage to HW and SW
Rain
Storm
Remote Backup
Re-installation plan
Virus and worms 4 3 12
System stop
Slow systems
Malfunctions
System log entries
Virus protec-tion program-mes
Firewall
Safe backup

6. Risk Strategies Total Risk = Priority
Total Risk (priority) = Costs/ impacts X Possibility
Deal with the high risk first (high priority)
Remember to plan with security risk management