For LP4 discussion questions, refer to the references below.

[1] National Institute of Standards Technology Standard, “Chapter 20 Assessing and Mitigating the risks to a hypothetical computer system”, An Introduction to Computer Security: The NIST Handbook, pp. 243-267.( https://csrc.nist.gov/publications/detail/sp/800-12/archive/1995-10-02)
[2] National Institute of Standards Technology Standard, Risk Management Guide for Information Technology Systems, NIST special publication 800-30 (. https://csrc.nist.gov/publications/detail/sp/800-30/archive/2002-07-01)

copy the link and paste it. website will open and check the answers

Each answer should be 4-5 lines.

Answer the following questions:
1. What are the different types of disclosure or brokerage of information?
2. What is the probability of disclosure/brokerage of information (in terms of high, medium, low)? What is the potential impact of disclosure/brokerage (in terms of high, medium, low)? Explain. Refer to [2].
3. According to the Risk-Level Matrix in [2], determine the risk scale of disclosure/brokerage of information.

Answer the following questions:
3. What are the control measures currently in use to protect against disclosure/brokerage of information?
4. What are the vulnerabilities related to information disclosure/brokerage found by the risk assessment team?

Answer the following questions:
5. What’s the recommendation by the risk assessment team?
6. What are the final decisions made by HGA management? Justify their decisions based on cost benefit analysis.