In an essay of no less than 250 words, answer the following:…
In an essay of no less than 250 words, answer the following: According to the National Institute of Standards and Technology Special Publication (NIST SP) 800-100, “risk is a function of the likelihood of a given threat source’s exercising a particular potential vulnerability, and the resulting impact of that adverse event on the organization.” Therefore, risk is an equation that includes likelihood, threats, vulnerabilities, and impacts. Define an example information system and describe the risk assessment process and the resulting risk calculation as applied to that hypothetical information system. Be sure to include the categorization/characterization of your hypothetical information system as part of your calculation. Be sure to cite your sources if paraphrasing or quoting others, and expand all acronyms for clarity. Do not use sources from outside this course’s materials, as this will lead to a score of 0 points for this essay.