Question

Wireless Security Quiz

• Describe and perform risk analysis and risk mitigation procedures (continued (2))
  • Loss expectancy calculations 2.2.4 Develop risk management plans for WLANs
  • Develop risk management plans for WLANs

Answer 1

Wireless Security Plan(WLAN Risk Management Plan)

Risk Analysis is the process of identifying the risk to an organisation. It is the systematic study of the uncertainties and risks that company faces , understand how and when the risks arise and estimate the impact of these risks on the company. Risk Analysis estimate the severity of the threats faced by organisation's system that need protection and finally provides a list of risks that organisation must mitigate.Thus, the organisation could focus on the most important threat first.

There are two types of risk analysis in WLAN:

1 -Quantitative : Quantitative risk analysis provides the monetary figure of expected losses which is based on the annual cost.

Quantitative risk analysis is based on the formula :

Loss of expectancy = Asset Value(AV) * Exposure Factor (EF)

where asset value is the cost of the asset which is under the risk and exposure factor is the percentage of the asset  lost.

After calculating the single loss of expectancy , the annualized loss expectancy (ALE) can be determine by the following formula:

ALE = Single loss of expectancy * Annualized Loss Of expectancy

2- Qualitative: Qualitative Risk analysis is based on the scenario, intuition, experience.

Risk Mitigation is the process of developing options and actions to enhance the opportunities and reduces the threats. Risk Mitigation includes the identifying the risk , and provides some strategies or methods to eliminate or reduce the risk to handle the project .

Some WLAN risk management Plan are :

1.)Risk Identification

a.) Asset Identification

b.) Threat Identification

c.) Vulnerability Appraisal

d.) Risk Assessment

2.)Compliance Monitoring and Evaluation

a.) Incident Response

b.) Code of ethics

3.) Security Policy Development

  a.)Due care

b.) Separation of duties