Examkin

Soru

Zorluk: OrtaRisk Identification, Assessment, and Response Strategies

A financial institution is performing a quantitative risk assessment on its central Hardware Security Module (HSM) cluster used for payment cryptographic operations. The HSM cluster has an estimated Asset Value (AVAV) of $1,200,000\$1,200,000. A risk analysis team determines that a major key exposure incident would have an Exposure Factor (EFEF) of 0.250.25. Threat intelligence models project an Annualized Rate of Occurrence (AROARO) of 0.150.15 for such an incident. What is the calculated Annualized Loss Expectancy (ALEALE) in US dollars for the HSM cluster?

Cevap: 45000 USD

Cevap

The Annualized Loss Expectancy (ALEALE) is $45,000.
To calculate the Annualized Loss Expectancy (ALEALE), first determine the Single Loss Expectancy (SLE=AV×EFSLE = AV \times EF). With an Asset Value (AVAV) of $1,200,000\$1,200,000 and an Exposure Factor (EFEF) of 0.250.25, SLE=$1,200,000×0.25=$300,000SLE = \$1,200,000 \times 0.25 = \$300,000. Next, multiply SLESLE by the Annualized Rate of Occurrence (ARO=0.15ARO = 0.15) to arrive at ALE=$300,000×0.15=$45,000ALE = \$300,000 \times 0.15 = \$45,000.

Adım Adım Çözüm

1
Calculate the Single Loss Expectancy (SLE)
$300,000
Single Loss Expectancy (SLESLE) measures the monetary loss expected each time a threat occurs. It is computed as Asset Value (AVAV) multiplied by Exposure Factor (EFEF): $1,200,000×0.25=$300,000\$1,200,000 \times 0.25 = \$300,000.
2
Calculate the Annualized Loss Expectancy (ALE)
$45,000
Annualized Loss Expectancy (ALEALE) calculates the overall yearly expected loss from the threat. It is computed by multiplying Single Loss Expectancy (SLESLE) by the Annualized Rate of Occurrence (AROARO): $300,000×0.15=$45,000\$300,000 \times 0.15 = \$45,000.

Anahtar Kavram

Quantitative Risk Analysis (SLE and ALE Calculation)
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Risk Identification, Assessment, and Response Strategies

Bu konudan daha fazla soru