SECURITY-INFORMED RISK ASSESSMENT Sample Clauses

SECURITY-INFORMED RISK ASSESSMENT. Our method for performing a security-informed risk assessment is based on our experience of using risk assessment techniques to analyze large-scale critical infrastructure systems that need to be both safe and secure. The process consists of eight iterative steps to perform the risk assessment, as shown in Table 14. Step 1 Establish system context and scope of assessment Describe the system to be assessed and its relationship with other systems and the environment. Identify the services provided by the system and the system assets. Agree the scope of and motivation for the assessment and identify the stakeholders and their communication needs. Identify any existing analyses, e.g. safety cases. Step 2 Identify potential threats Define the threat sources and identify potential threat scenarios. Step 3 Refine and focus system models Refine and focus system models in the light of the threat scenarios to ensure that they are at the right level of detail for an effective risk analysis. Step 4 Preliminary risk analysis Undertake architecture-based risk analysis, identifying consequences and relevant vulnerabilities and causes together with any intrinsic mitigations and controls. Consider doubts and uncertainties, data and evidence needs. Step 5 Identify specific attack scenarios Refine preliminary risk analysis to identify specific attack scenarios. Focus on large consequence events and differences with respect to existing system. Step 6 Focused risk analysis Match threat sources to attack scenarios and prioritize possible consequences according to the level of risk. As with Step 5 the focus is on large consequence events and differences with respect to existing system. Step 7 Finalize risk assessment Finalize risk assessment by reviewing implications and options arising from focused risk analysis. Review defence-in-depth and undertake sensitivity and uncertainty analysis. Consider whether design-basis threats are appropriate. Identify additional mitigations and controls. Step 8 Report results Report the results of the risk assessment to stakeholders at the appropriate level of detail.
Sample 1
AutoNDA by SimpleDocs

Related to SECURITY-INFORMED RISK ASSESSMENT

  • Facility Information The Product is: Renewable Energy Facility or Unit Specific; if so, complete the following: Name of Facility Location of Facility EIA number Online Date Renewable Energy Source specific; if so, state: Aggregator area specific. Use the following table for generator aggregation programs: REC Delivery Unit Specific Generating Renewable Energy Unit / Renewable Energy Source Generating Renewable Energy Aggregation Program / Renewable Energy Sources Location of Generator or Area of Aggregation

  • Safety Information Any other bulletins may only be posted by mutual agreement between the Union and designated Management.

  • Periodic Risk Assessment Provider further acknowledges and agrees to conduct periodic risk assessments and remediate any identified security and privacy vulnerabilities in a timely manner.

  • Risk Assessment An assessment of any risks inherent in the work requirements and actions to mitigate these risks.

  • Contractor Information The Contractor will provide up to date information for each of the following in the form and manner specified by OGS:

  • Data Protection Impact Assessment and Prior Consultation Processor shall provide reasonable assistance to the Company with any data protection impact assessments, and prior consultations with Supervising Authorities or other competent data privacy authorities, which Company reasonably considers to be required by article 35 or 36 of the GDPR or equivalent provisions of any other Data Protection Law, in each case solely in relation to Processing of Company Personal Data by, and taking into account the nature of the Processing and information available to, the Contracted Processors.

  • Property Information (a) The Parties agree that, prior to the Effective Date, Seller furnished to Purchaser (among other items) copies of the items set forth on Exhibit “C” attached hereto and incorporated herein if and to the extent the same existed, were in Seller’s possession or control, and concern the Property. (b) Purchaser has had an opportunity to review and copy any third party reports and other information which are in Seller’s files and which relate to the physical condition of the Real Property or the status of the governmental approvals or utility commitments for the Real Property (collectively, the “Property Condition”). In no event, however, is Seller required to furnish to Purchaser any internal reports, memoranda or other items prepared by Seller’s own employees, any proprietary information of Seller, any communications from Seller’s attorneys, or any third party reports dealing with matters other than the Property Condition (including without limitation any property appraisals, financial analyses, market analyses and other similar items). (c) The items referenced in Sections 3.02(a) and 3.02(b) above, together with all other information provided by Seller to Purchaser are referred to in this Agreement collectively as the “Property Information”. Purchaser acknowledges receipt of and the opportunity to the review the Property Information prior to the Effective Date. Notwithstanding any provision in this Agreement to the contrary, Purchaser agrees and acknowledges that: (i) the Property Information is delivered to Purchaser solely as an accommodation to Purchaser; (iii) Seller has not undertaken any independent investigation as to the truth, accuracy or completeness of any matters set out in or disclosed by the Property Information, except as otherwise specifically provided in this Agreement or the closing documents executed by Seller pursuant to this Agreement; (iii) the Property Information was delivered to Purchaser in its “AS IS” and “WITH ALL FAULTS” condition and Seller has not made and does not make any warranties or representations of any kind or nature regarding the truth, accuracy or completeness of the information set out in or disclosed by the Property Information, except as otherwise specifically provided in this Agreement or in the closing documents executed by Seller pursuant to this Agreement; and (iv) Seller shall have no liability or culpability of any kind or nature as a result of providing the Property Information to Purchaser or as a result of Purchaser’s reliance on any of the Property Information or any information set forth or referred to therein or disclosed thereby, except as otherwise specifically provided in this Agreement or in the closing documents executed by Seller pursuant to this Agreement.

  • Risk Assessments a. Risk Assessment - DST shall, at least annually, perform risk assessments that are designed to identify material threats (both internal and external) against Fund Data, the likelihood of those threats Schedule 10.2 p.2 occurring and the impact of those threats upon DST organization to evaluate and analyze the appropriate level of information security safeguards (“Risk Assessments”). b. Risk Mitigation - DST shall use commercially reasonable efforts to manage, control and remediate threats identified in the Risk Assessments that it believes are likely to result in material unauthorized access, copying, use, processing, disclosure, alteration, transfer, loss or destruction of Fund Data, consistent with the Objective, and commensurate with the sensitivity of the Fund Data and the complexity and scope of the activities of DST pursuant to the Agreement. c. Security Controls Testing - DST shall, on approximately an annual basis, engage an independent external party to conduct a review (including information security) of DST’s systems that are related to the provision of services. DST shall have a process to review and evaluate high risk findings resulting from this testing.

  • Loss Assessment We will pay up to $1000 for your share of loss assessment charged during the policy period against you by a corporation or as- sociation of property owners, when the assess- ment is made as a result of:

  • INSURANCE REQUIREMENT REVIEW Grantee agrees to periodic review of insurance requirements by Agency under this Agreement and to provide updated requirements as mutually agreed upon by Grantee and Agency.

Draft better contracts in just 5 minutes Get the weekly Law Insider newsletter packed with expert videos, webinars, ebooks, and more!