Map: "A global display of Terrorism and Other Suspicious Events"(Global Incident Map) ACTIVITIES PRE-MORTUM RISK MODELING Covered in full in Risk Assessment: "Pre-Mortum" Activity Identification of critical processes Selected critical process mapping Threat Identification (Control/Confidentialy/Idenity/Integrity/Authentication/Access) Impact Identification Adversary Exploration (Likelyhood) Impact Ranking CRITICAL DATA ACTIVITY Covered in full in Data Assessment: With staff input, post up popular places where data is kept (laptops, email, shared drives...) Using stickies, gather from the staff what data is kept in what locations - duplicating notes when needed Rank data by sensitivity Discuss the impact of one of the devices where data is stored being lost - are there backups? Discuss the impact of a device being exposed / taken by an adversary Identify who has access (physical access, login access, and permissions), and who needs to have access to get the organizations work completed. THREAT IDENTIFICATION Summary These activities build off of a process or data mapping exercise to connect actual processes or assets and data of the organization with potential threats, then drilling down into specific, likely threats the organization faces, adversaries who might take advantage of them, and the impact of this happening. Page 151 of 240