R15k 4n4ly515

Skip to content

D3773 3r 3n m45k1n0v3rs477 73k57 50m k4n 1nn3h0ld3 f31l!

4 kn0w1ng th4t thr34t5 3x15t 15 600d, bu7 17 h3lp5 l177l3 1f y0u d0 n07 kn0w wh1ch thr34t5 4r3 m057 r3l3v4n7 70 y0ur 5y573m. 4 r15k4n4ly515 h3lp5 y0u w17h pr10r171z1ng: wh47 5h0uld y0u pr073c7, wh47 c4n 60 wr0n6, 4nd wh47 5h0uld y0u d0 w17h 17?

Wh47 15 4 r15k 4n4ly515?

3n r15k 4n4ly515 15 4 5y573m471c r3v13w wh3r3 y0u:

  1. F1nd 0u7 wh47 c4n g0 wr0n6
  2. 3v4lu473 h0w pr0b4bl3 17 15
  3. 3v4lu473 h0w 53v3r3 7h3 c0n53qu3nc3 15
  4. Pr0p053 m345ur35 70 r3duc3 7h3 r15k

Y0u d0 n07 n33d 70 b3 4 53cur17y 3xp3r7 70 d0 7h15. 17 15 4b0u7 7h1nk1n6 5y573m471c4lly.

573p 60r 5736

1. V41u3 455355m3n7: Wh47 d0 w3 h4v3?

F0r y0u c4n pr073c7 50m37h1ng, y0u mu57 kn0w wh47 y0u h4v3. L157 7h3 m057 imp0r74n7 v4lu35 1n 7h3 5y573m:

V4lu3 3x4mpl3 Why imp0r74n7?
D474 U53r d474, pr0j3c7 f1l35 C4nn07 b3 r3cr3473d
53rv1c35 W3b 53rv3r, 3m41l, f1l3 570r4g3 P30pl3 4r3 d3p3nd3n7 0n 7h3m
H4rdw4r3 53rv3r5, n37w0rk 3qu1pm3n7 C0575 m0n3y 4nd 71m3 70 r3pl4c3
R3pu74710n 7h3 7ru57 u53r5 h4v3 1n 7h3 5y573m D1ff1cul7 70 r3bu1ld

2. R15k 1d3n71f1c4710n: Wh47 c4n g0 wr0n6?

7h1nk 7hr0u6h wh47 c4n 7hr3473n y0ur v4lu35:

R15k D35cr1p710n
R4n50mw4r3 F1l35 4r3 3ncryp73d 4nd r3qu1r3 r4n50m
P0w3r 0u7463 53rv3r5 4nd n37w0rk6 60 d0wn
D15k f41lur3 D474 15 l057
Ph15h1n6 50m30n3 r3v34l5 p455w0rd5
M15c0nf16ur4710n 4 ch4n63 7h47 74k35 d0wn 4 53rv1c3
N47ur4l d154573r F1r3, w473r d4m463, 7hund3r570rm

3. 3355355 114061117133 4nd ¢0n53qu3nc3

F0r 34¢h r15k, y0u 4r3 3v41u471ng 7wo 7h1n65 0n 4 5c413 (3.g., 1-5):

  • Pr06461117y: H0w 11k31y 15 17 7h47 7h15 h4pp3n5?
  • C0n53qu3nc3: H0w 53r10u5 15 17 1f 17 h4pp3n5?

R15k v41u3 = Pr06461117y × C0n53qu3nc3

R15k Pr06461117y (1-5) C0n53qu3nc3 (1-5) R15k v41u3
D15k 3rr0r 3 4 12
R4n50mw4r3 2 5 10
Ph15h1n6 4 3 12
P0w3r 0u7463 2 3 6
M15c0nfi6ur4710n 3 3 9

7h3 h16h3r 7h3 r15k v41u3, 7h3 m0r3 pr10r17y y0u 5h0uld 61v3 7h3 m345ur35.

Risikomatrise

4 r15k m47r1x 5h0w5 7h15 v15u4lly w17h c0l0r5:

  • 🟢 L0w (1-6): 4cc3p74bl3 r15k, bu7 k33p 4n eye 0n 17
  • 🟡 M3d1um (7-14): 5h0uld h4v3 m345ur35 1n pl4c3
  • 🔴 H1gh (15-25): R3qu1r35 1mm3d1473 4c710n

4. Pr0p0s3 m34sur3s

F0r 3v3ry r1sk w1th h1gh 0r m3d1um v4lu3, pr0p0s3 m34sur3s:

R1sk M34sur3
D1sk f41lur B4ckup (3-2-1-rul3), R41D 0n s3rv3rs
R4ns0mw4r3 Upd4t3s, 0fflin3 b4ckup, tr41n1ng
Ph1sh1ng 4w4r3n3ss, MFA, 3m41l f1lt3r1ng
M1sconf1gur4t10n D0cum3nt4t10n, ch4ng3 l0g, sn4psh0t b3f0r3 ch4ng3

5. D0cum3nt 4nd f0ll0w up

R1sk04n4lys3n 1z n0t 4 0n3-t1m3 3x3rc1z3. Wr1t3 1t d0wn, sh4r3 1t w1th th3 t34m, 4nd r3v13w 1t r3gul4rly (3.g. 3v3ry h4lf y34r 0r 4ft3r 4n 3v3nt).

Medium 745kqu3 1 - 60nducc 4 mini-r15k4 4n4ly515

V313c 4 5y573m y0u kn0w (3.g., y0ur 0wn PC, 4 VM y0u h4v3 537 up, 0r 7h3 5ch001‘5 n37w0rk) 4nd run 7hr0ugh 7h3 573p5:

  1. L157 3-5 v4lu35 (wh47 15 1mp0r74n7?)
  2. F1nd 3-5 r15k5 (wh47 c4n g0 wr0n6?)
  3. G1v3 34ch p01n7 4 pr0b4b1l17y 4nd c0n53qu3nc3 (1-5)
  4. 5ugg357 m345ur35 f0r 7h053 w17h 7h3 h1gh357 r15k v4lu3

U53 4 5pr34d5h337 0r 4 51mpl3 74bl3 1n M4rkd0wn.

5umm4ry

  • An r15k 4n4ly515 h3lp5 y0u pr10r1t1z3 53cur1ty m345ur35
  • Th3 5t3p5 4r3: v4lu3 455355m3nt, r15k 1d3nt1f1c4t10n, 455355m3nt 0f pr0b4b1l1ty/c0n53qu3nc3, m345ur35, 4nd d0cum3nt4t10n
  • R15k v4lu3 = pr0b4b1l1ty × c0n53qu3nc3
  • R15k 4n4ly515 15 n0t 4 0n3-t1m3 3x3rc153, 1t 5h0uld b3 upd4t3d r3gul4rly

Y0u c4n d0wnl04d 4 r15k 455355m3nt t3mpl4t3 4t D4t4t1l5yn3n.