Analysis of Threats & Risks

Duration: 12 min

This video lesson is available to enrolled students.

Return to /learn/RSSB-BASIC-COMPUTER-INSTRUCTOR/paper-2-system-analysis-and-design/security-risk-management-maintenance/threat-and-risk-analysis/asset-analysis-of-threats-risks after enrolling

Inside: a video lesson and guided study material.

Module outline

  1. About the Course: About the Course
  2. Paper-1 & 2 | Basic Numeracy: अनुपात और समानुपात / Ratio and Proportion, Divisibility Rules, मिश्रण और एलिगेशन / Mixture and Alligation, Permutation and Combination, Logarithm, संख्या पद्धति / Number System, महत्तम समापवर्तक और लघुत्तम समापवर्त्य / HCF and LCM, Sequence and Series (Series), समय, चाल और दूरी / Time, Speed and Distance, प्रतिशत / Percentage, औसत / Average, घन क्षेत्रमिति / Solid Mensuration, Age Problems, Arithmetic, Statistics, Probability, लाभ, हानि और बट्टा / Profit, Loss and Discount, साधारण और चक्रवृद्धि ब्याज / Simple and Compound Interest, Partnership, Speed Mathematics and Basic Mathematics, Algebra, सरलीकरण, घातांक और करणी / Simplification, Indices and Surds, समय और कार्य / Time and Work, Pipe and Cistern, RSSB Specific Videos - Basic Numeracy, समुच्चय, संबंध, फलन और विविक्त गणित / Sets, Relations, Functions and Discrete Mathematics, संख्या पद्धति और संख्या सिद्धांत / Number Systems and Number Theory, निर्देशांक ज्यामिति, सदिश और त्रिविमीय ज्यामिति / Coordinate Geometry, Vectors and 3D Geometry, बहुपद, समीकरण और सम्मिश्र संख्याएँ / Polynomials, Equations and Complex Numbers
  3. Paper-1 & 2 | Data Interpretation: आँकड़ा निर्वचन / Data Interpretation
  4. Paper-1 & 2 | General Mental Ability: Mental Ability, RSSB Specific Videos - Mental Ability
  5. Paper-1 & 2 | Logical Reasoning and Analytical Ability: श्रेणी / Series, कूट लेखन एवं कूट वाचन / Coding-Decoding, Data Sufficiency, अशाब्दिक तर्क / Non-Verbal Reasoning, Syllogisms, बैठक व्यवस्था एवं पहेलियाँ / Seating Arrangement and Puzzles, रक्त संबंध / Blood Relations, दिशा एवं दूरी / Direction and Distance, Analytical Reasoning (Counting Figures Reasoning), गणितीय संक्रियाएँ एवं लुप्त संख्या / Mathematical Operations and Missing Numbers, कैलेंडर एवं घड़ी / Calendar and Clock, Clock, घन, पासा एवं आकृतियों की गिनती / Cubes, Dice and Figure Counting, वेन आरेख, न्याय वाक्य एवं असमानता / Venn Diagrams, Syllogism and Inequalities, सादृश्यता एवं वर्गीकरण / Analogy and Classification, क्रम एवं रैंकिंग / Order and Ranking, कथन आधारित तार्किक विवेचन / Statement-Based Reasoning, Data Arrangement, वर्णमाला एवं संख्या परीक्षण / Alphabet and Number Test, Crypt Arithmetic
  6. Paper-1 & 2 | Decision Making and Problem Solving: आँकड़ों की पर्याप्तता एवं निर्णय क्षमता / Data Sufficiency and Decision Making
  7. Paper-1 | General Science: वैज्ञानिक उपलब्धियाँ और अनुसंधान / Scientific Achievements and Research, Biology, Chemistry, RSSB Specific Videos
  8. Paper-1 | General Awareness: राज्य विशेष सामान्य ज्ञान / State-Specific General Knowledge, समसामयिकी / Current Affairs
  9. Paper - 2 | Digital Logic Systems: Digital Systems & Boolean Basics, Logic Gates & Hardware, Combinational Circuit, Sequential Circuits
  10. Paper-2 | Database Management System: Basics of DBMS, ER Diagram, Relational Model & Functional Dependencies, Keys & Integrity Constraints, Normalization (1NF - BCNF), Decomposition Properties & 4NF, Relational Calculus, Relational Algebra, SQL, NoSQL
  11. Paper-2 | Data Structures & Algorithms: Introduction to DS, Array, Stack, Queue, Linked List, Tree, Graphs, Algorithm Analysis, Sorting Algorithms, Intro to Compilers, Hashing
  12. Paper 2 | Data Communication and Network Security: Introduction to CN, Data Communication, Data Link Layer - Ethernet, DLL: Error Control, Net Layer: IPv4 & Proto, Net Layer: IP Addressing, Application Layer, Hardware basics, Network Security, Ethical Hacking
  13. Paper-2 | Operating Systems: Introduction to OS, Process Management, Memory Management, File Management, Deadlock
  14. Paper-2 | Computer Organization and Architecture: Basics of COA, Floating Point Rep, Cache Memory Organization, Input Output Organisation, Instr Formats & Modes, Control Unit Design, Register Transfer and Microoperations, Programming the Basic Computer, Number System, Number Representation
  15. Paper 2 | System Analysis and Design: Fundamentals of Systems and Information Systems, Fundamentals of Software Engineering, SDLC and Development Approaches, Software Documentation and Software Requirements Specification (SRS), SDD and Quality Assurance, Security, Risk Management & Maintenance, Software Testing
  16. Paper-2 | C Programming: C Fundamentals, Control Flow, Functions, Arrays & Pointers, Storage Classes, Structures & Enums, DMA, Macros, Scoping & File Handling
  17. Paper 2 | OOPS , C++ , JAVA: Language Design, OOPS with C++, Java, .Net Programming, Java Fundamentals
  18. Paper 2 | Python: Introduction to Python, Tokens, Variables, Data Types, I/O, Operators & Expressions, Control Flow & Looping, Collections & Strings, Functions & Modules, File Handling & Data Analysis
  19. Emerging Trends and AI: Emerging Tech Trends, कंप्यूटर के मूल सिद्धांत / Computer Fundamentals, व्यापार, विपणन एवं उपभोक्ता संरक्षण / Trade, Marketing and Consumer Protection
  20. Paper-2 | Data Processing (Ms-Office): MS Office Applications, कंप्यूटर सॉफ़्टवेयर / Computer Software, ऑपरेटिंग सिस्टम / Operating System, वर्ड प्रोसेसिंग (MS Word) / Word Processing (MS Word), प्रेज़ेंटेशन (MS PowerPoint) / Presentation Software (MS PowerPoint)
  21. Paper-2 | Internet and Web Technologies: HTML Basics, CSS, XML, JavaScript-Basics, Internet Fundamentals, Protocols & Services, Web Publishing & Hosting, Server Side & Security, Emerging Technologies, Terms & Abbreviations, Cyber Threats and Malware Attacks, Role of Internet and Web Services, Security in Mobile and Wireless Computing, साइबर सुरक्षा / Cyber Safety and Security, कंप्यूटर नेटवर्क / Computer Networks
  22. Paper 2 | Pedagogy: वृद्धि और विकास / Growth and Development, विकास के सिद्धांत / Theories of Development, Concept of Pedagogy, समावेशी शिक्षा / Inclusive Education, Experiential Pedagogy, आकलन और मूल्यांकन / Assessment and Evaluation, संज्ञानात्मक प्रक्रियाएँ / Cognitive Processes, समाजीकरण और जेंडर / Socialisation and Gender, National Education Policy (NEP) 2020
  23. Live Classes: RSSB Live Sessions
  24. Paper 1 - Full Mock Tests:
  25. Paper 2 - Full Mock Tests:
  26. BCI Previous Year Papers:
AI summary & chapters

AI Summary

An AI-generated summary of this video lecture.

This lecture segment focuses on the analysis of threats and risks within information security systems. It begins by defining the relationship between security and risk, stating that security measures must be commensurate with the risk involved. The core of threat and risk assessment is broken down into three steps: identifying applicable threats, recognizing vulnerabilities, and calculating probable loss. The instructor contrasts historical centralized computing systems with modern, dispersed infrastructure, highlighting the increased complexity of managing security today. The lecture then transitions to the importance of a written security policy, detailing key components such as authentication, authorization, information integrity, and detection. Finally, it introduces risk assessment and management, defining it as a proactive process to mitigate monetary losses and reputational harm, distinguishing between quantitative and qualitative approaches.

Chapters

  1. 0:00 – 2:00 00:00-02:00

    The video opens with the section title '12.5.1 Analysis of Threats and Risks'. The on-screen text states, 'The security of any system should be commensurate with the risk involved.' The instructor explains that threat and risk assessment involves three main activities: identification of applicable threats to IS infrastructure, recognition of vulnerability, and probable loss calculation. The text emphasizes the necessity of identifying the source of the threat. It provides historical context, noting that organization computer systems were historically centrally located, and management of issues was the responsibility of computer center staff. Security issues were also the responsibility of this staff, whose focus was to make applications available on the centrally located computer as required.

  2. 2:00 – 5:00 02:00-05:00

    The instructor begins annotating the text, writing 'Threats -> Risk -> Secure' to illustrate the flow of security thinking. She writes 'Analysis' next to the title. The text contrasts the historical centralized model with today's computing infrastructure, which is described as 'far more diverse and complex to manage' with dispersed business information. A diagram labeled 'Figure 12.1: Information Security Architecture' is shown, featuring boxes for 'Recovery, Strategy, System modification and Legal action' and 'Reserve Measures'. The instructor writes 'Facebook -> High Risk -> Security' as an example of risk assessment. She also writes 'Tools' and 'Recovery' near the diagram, indicating practical applications of these concepts.

  3. 5:00 – 10:00 05:00-10:00

    The instructor writes out the three steps of assessment: '1 Identify of Threats -> 2 Recognize Vulnerabilities -> 3 Probable loss'. The text discusses that the source of threats can be either external or internal, noting that historically viruses have been a major potential external security threat. However, with diversification of activity over multiple locations, it is difficult to perceive when an unauthorized intruder may try to hack. The lecture introduces 'Security policy', stating organizations must possess a security policy in writing. It lists four issues to address: Authentication (to see that the person is a bona fide user), Authorization (privileges of the user or who can do what), Information integrity (is it possible that the end user can modify the information), and Detection (once the problem is identified, how it is handled). The instructor writes 'Financial loss, Reputation, Legal issue' next to a question about loss analysis.

  4. 10:00 – 12:03 10:00-12:03

    The final section covers 'Risk Assessment and Management'. The text defines a thorough and proactive risk assessment as the first step in establishing a sound security system. It is described as an ongoing process of evaluating threats and vulnerabilities, and establishing an appropriate risk management program to mitigate potential monetary losses and harm to an institution's reputation. The text clarifies that threats have the potential to harm an institution, while vulnerabilities are weaknesses that can be exploited. It concludes by stating that while there are different approaches followed by organizations to analyze risks, ultimately all methods boil down to two types of approaches: quantitative and qualitative.

The lecture progresses logically from defining the fundamental relationship between security and risk to practical assessment methodologies. It starts by establishing that security must match the risk level, breaking down assessment into identifying threats, recognizing vulnerabilities, and calculating loss. The instructor uses annotations to visualize these concepts, such as the 'Threats -> Risk -> Secure' flow and the 'Information Security Architecture' diagram. The discussion then shifts to the evolution of infrastructure from centralized to dispersed, necessitating more complex management. This leads into the formulation of a security policy, which must address authentication, authorization, integrity, and detection. Finally, the lecture introduces risk management as a proactive, ongoing process, categorizing analysis methods into quantitative and qualitative approaches to mitigate both monetary and reputational harm.

Loading lesson…