Part 1- Fill out the final three columns in the table from the previous week.
Rate the probability and impact of each vulnerability-threat pair as High, Medium, or Low. Note that these are independent of each other.
Rank the pairs in the order they should be addressed by the organization. Note that High/High rows will be at the top and Low/Low rows at the bottom. The team will have to decide where to rank rows not at these extremes.
Suggest specific mitigation steps to take for the top 20 rows. You will go into more detail for the final project due in Week Five. Leave the
Suggested Mitigation Steps column empty for rows below the top 20.
Part 2- Prepare a brief explanation on the final rankings.
Describe how the team finally ranked the pairs and the reasoning behind the suggested mitigation steps.
Focus on the top 20 rows, but cover why the others were ranked lower and will not be addressed at this time.
Keep this explanation brief and clear but informative.