CPC G06F 21/577 (2013.01) [G06F 2221/034 (2013.01)] | 14 Claims |
1. A method for analyzing a risk posed by a threat occurrence to a component group, the method comprising the steps of:
(a) providing a list of data elements to a user via a user interface;
(b) receiving and processing a selection of the data elements from the user via the user interface;
(c) generating a risk impact and a risk likelihood posed by the threat occurrence to the component group based on the selection of the data elements from the user;
(d) providing the risk impact and the risk likelihood to the user via the user interface;
(e) generating a risk rating posed by the threat occurrence to the component group; and
(f) receiving a selection of the risk impact and a selection of the risk likelihood from the user via the user interface, and generating a database comprising an acceptable minimum risk impact and an acceptable maximum risk impact for a plurality of risk scenarios based on the asset importance selected by the user.
|