1.4 KiB
1.4 KiB
| 1 | id | name | asset_value | exposure_factor | aro | likelihood | impact | category | owner |
|---|---|---|---|---|---|---|---|---|---|
| 2 | R-001 | Ransomware Attack on Production Infrastructure | 10000000 | 0.6 | 0.15 | 4 | 5 | Cybersecurity | CISO |
| 3 | R-002 | Data Breach - Customer PII Exposure | 5000000 | 0.8 | 0.2 | 4 | 5 | Data Privacy | CISO |
| 4 | R-003 | Phishing Attack Leading to Credential Compromise | 2000000 | 0.3 | 0.5 | 5 | 3 | Cybersecurity | Security Manager |
| 5 | R-004 | Unpatched Critical Vulnerabilities | 3000000 | 0.4 | 0.3 | 4 | 4 | Vulnerability Management | IT Security |
| 6 | R-005 | Insider Threat - Malicious Employee | 4000000 | 0.5 | 0.1 | 2 | 5 | Insider Risk | HR |
| 7 | R-006 | DDoS Attack on Public Services | 1500000 | 0.2 | 0.25 | 3 | 3 | Availability | IT Operations |
| 8 | R-007 | Third-Party Vendor Breach | 3500000 | 0.6 | 0.2 | 3 | 4 | Third-Party Risk | Procurement |
| 9 | R-008 | Cloud Misconfiguration Exposure | 2500000 | 0.7 | 0.4 | 4 | 4 | Cloud Security | Cloud Architect |
| 10 | R-009 | SQL Injection in Customer Portal | 4500000 | 0.9 | 0.15 | 3 | 5 | Application Security | AppSec Lead |
| 11 | R-010 | Physical Security Breach at Data Center | 8000000 | 0.3 | 0.05 | 2 | 5 | Physical Security | Facilities |
| 12 | R-011 | Lost or Stolen Laptop with Unencrypted Data | 500000 | 0.8 | 0.3 | 3 | 3 | Endpoint Security | IT Security |
| 13 | R-012 | Compliance Violation - GDPR | 2000000 | 0.3 | 0.15 | 3 | 4 | Compliance | Privacy Officer |
| 14 | R-013 | Social Engineering Attack | 1000000 | 0.2 | 0.6 | 5 | 2 | Human Factor | Security Awareness |
| 15 | R-014 | Zero-Day Exploit | 6000000 | 0.5 | 0.05 | 2 | 5 | Vulnerability Management | CISO |
| 16 | R-015 | Supply Chain Attack | 7000000 | 0.6 | 0.1 | 2 | 5 | Supply Chain | Procurement |