Risk Assessment and Management

Duration: 23 min

This video lesson is available to enrolled students.

Return to /learn/RSSB-BASIC-COMPUTER-INSTRUCTOR/paper-2-system-analysis-and-design/security-risk-management-maintenance/threat-and-risk-analysis/asset-risk-assessment-and-management after enrolling

Inside: a video lesson and guided study material.

Module outline

  1. About the Course: About the Course
  2. Paper-1 & 2 | Basic Numeracy: अनुपात और समानुपात / Ratio and Proportion, Divisibility Rules, मिश्रण और एलिगेशन / Mixture and Alligation, Permutation and Combination, Logarithm, संख्या पद्धति / Number System, महत्तम समापवर्तक और लघुत्तम समापवर्त्य / HCF and LCM, Sequence and Series (Series), समय, चाल और दूरी / Time, Speed and Distance, प्रतिशत / Percentage, औसत / Average, घन क्षेत्रमिति / Solid Mensuration, Age Problems, Arithmetic, Statistics, Probability, लाभ, हानि और बट्टा / Profit, Loss and Discount, साधारण और चक्रवृद्धि ब्याज / Simple and Compound Interest, Partnership, Speed Mathematics and Basic Mathematics, Algebra, सरलीकरण, घातांक और करणी / Simplification, Indices and Surds, समय और कार्य / Time and Work, Pipe and Cistern, RSSB Specific Videos - Basic Numeracy, समुच्चय, संबंध, फलन और विविक्त गणित / Sets, Relations, Functions and Discrete Mathematics, संख्या पद्धति और संख्या सिद्धांत / Number Systems and Number Theory, निर्देशांक ज्यामिति, सदिश और त्रिविमीय ज्यामिति / Coordinate Geometry, Vectors and 3D Geometry, बहुपद, समीकरण और सम्मिश्र संख्याएँ / Polynomials, Equations and Complex Numbers
  3. Paper-1 & 2 | Data Interpretation: आँकड़ा निर्वचन / Data Interpretation
  4. Paper-1 & 2 | General Mental Ability: Mental Ability, RSSB Specific Videos - Mental Ability
  5. Paper-1 & 2 | Logical Reasoning and Analytical Ability: श्रेणी / Series, कूट लेखन एवं कूट वाचन / Coding-Decoding, Data Sufficiency, अशाब्दिक तर्क / Non-Verbal Reasoning, Syllogisms, बैठक व्यवस्था एवं पहेलियाँ / Seating Arrangement and Puzzles, रक्त संबंध / Blood Relations, दिशा एवं दूरी / Direction and Distance, Analytical Reasoning (Counting Figures Reasoning), गणितीय संक्रियाएँ एवं लुप्त संख्या / Mathematical Operations and Missing Numbers, कैलेंडर एवं घड़ी / Calendar and Clock, Clock, घन, पासा एवं आकृतियों की गिनती / Cubes, Dice and Figure Counting, वेन आरेख, न्याय वाक्य एवं असमानता / Venn Diagrams, Syllogism and Inequalities, सादृश्यता एवं वर्गीकरण / Analogy and Classification, क्रम एवं रैंकिंग / Order and Ranking, कथन आधारित तार्किक विवेचन / Statement-Based Reasoning, Data Arrangement, वर्णमाला एवं संख्या परीक्षण / Alphabet and Number Test, Crypt Arithmetic
  6. Paper-1 & 2 | Decision Making and Problem Solving: आँकड़ों की पर्याप्तता एवं निर्णय क्षमता / Data Sufficiency and Decision Making
  7. Paper-1 | General Science: वैज्ञानिक उपलब्धियाँ और अनुसंधान / Scientific Achievements and Research, Biology, Chemistry, RSSB Specific Videos
  8. Paper-1 | General Awareness: राज्य विशेष सामान्य ज्ञान / State-Specific General Knowledge, समसामयिकी / Current Affairs
  9. Paper - 2 | Digital Logic Systems: Digital Systems & Boolean Basics, Logic Gates & Hardware, Combinational Circuit, Sequential Circuits
  10. Paper-2 | Database Management System: Basics of DBMS, ER Diagram, Relational Model & Functional Dependencies, Keys & Integrity Constraints, Normalization (1NF - BCNF), Decomposition Properties & 4NF, Relational Calculus, Relational Algebra, SQL, NoSQL
  11. Paper-2 | Data Structures & Algorithms: Introduction to DS, Array, Stack, Queue, Linked List, Tree, Graphs, Algorithm Analysis, Sorting Algorithms, Intro to Compilers, Hashing
  12. Paper 2 | Data Communication and Network Security: Introduction to CN, Data Communication, Data Link Layer - Ethernet, DLL: Error Control, Net Layer: IPv4 & Proto, Net Layer: IP Addressing, Application Layer, Hardware basics, Network Security, Ethical Hacking
  13. Paper-2 | Operating Systems: Introduction to OS, Process Management, Memory Management, File Management, Deadlock
  14. Paper-2 | Computer Organization and Architecture: Basics of COA, Floating Point Rep, Cache Memory Organization, Input Output Organisation, Instr Formats & Modes, Control Unit Design, Register Transfer and Microoperations, Programming the Basic Computer, Number System, Number Representation
  15. Paper 2 | System Analysis and Design: Fundamentals of Systems and Information Systems, Fundamentals of Software Engineering, SDLC and Development Approaches, Software Documentation and Software Requirements Specification (SRS), SDD and Quality Assurance, Security, Risk Management & Maintenance, Software Testing
  16. Paper-2 | C Programming: C Fundamentals, Control Flow, Functions, Arrays & Pointers, Storage Classes, Structures & Enums, DMA, Macros, Scoping & File Handling
  17. Paper 2 | OOPS , C++ , JAVA: Language Design, OOPS with C++, Java, .Net Programming, Java Fundamentals
  18. Paper 2 | Python: Introduction to Python, Tokens, Variables, Data Types, I/O, Operators & Expressions, Control Flow & Looping, Collections & Strings, Functions & Modules, File Handling & Data Analysis
  19. Emerging Trends and AI: Emerging Tech Trends, कंप्यूटर के मूल सिद्धांत / Computer Fundamentals, व्यापार, विपणन एवं उपभोक्ता संरक्षण / Trade, Marketing and Consumer Protection
  20. Paper-2 | Data Processing (Ms-Office): MS Office Applications, कंप्यूटर सॉफ़्टवेयर / Computer Software, ऑपरेटिंग सिस्टम / Operating System, वर्ड प्रोसेसिंग (MS Word) / Word Processing (MS Word), प्रेज़ेंटेशन (MS PowerPoint) / Presentation Software (MS PowerPoint)
  21. Paper-2 | Internet and Web Technologies: HTML Basics, CSS, XML, JavaScript-Basics, Internet Fundamentals, Protocols & Services, Web Publishing & Hosting, Server Side & Security, Emerging Technologies, Terms & Abbreviations, Cyber Threats and Malware Attacks, Role of Internet and Web Services, Security in Mobile and Wireless Computing, साइबर सुरक्षा / Cyber Safety and Security, कंप्यूटर नेटवर्क / Computer Networks
  22. Paper 2 | Pedagogy: वृद्धि और विकास / Growth and Development, विकास के सिद्धांत / Theories of Development, Concept of Pedagogy, समावेशी शिक्षा / Inclusive Education, Experiential Pedagogy, आकलन और मूल्यांकन / Assessment and Evaluation, संज्ञानात्मक प्रक्रियाएँ / Cognitive Processes, समाजीकरण और जेंडर / Socialisation and Gender, National Education Policy (NEP) 2020
  23. Live Classes: RSSB Live Sessions
  24. Paper 1 - Full Mock Tests:
  25. Paper 2 - Full Mock Tests:
  26. BCI Previous Year Papers:
AI summary & chapters

AI Summary

An AI-generated summary of this video lecture.

The video lecture provides a detailed examination of "Analysis of Threats and Risks" within the context of Information Security. It begins by establishing that system security must be commensurate with the risk involved. The instructor highlights the three pillars of risk assessment: identifying threats, recognizing vulnerabilities, and calculating probable loss. The lecture then transitions to the sources of threats, distinguishing between external and internal origins, and discusses the historical shift from centralized to dispersed computing infrastructures. A significant portion is dedicated to Risk Analysis, where the instructor outlines key questions regarding natural disasters, financial losses, and recovery times. The session further explores Security Policy, detailing components like authentication, authorization, and integrity, and emphasizing the need for written policies. Finally, the lecture contrasts Quantitative Risk Analysis, which uses numerical formulas, with Qualitative Risk Analysis, which assesses risk based on asset nature and system criticality.

Chapters

  1. 0:00 – 2:00 00:00-02:00

    The lecture opens with section 12.5.1 "Analysis of Threats and Risks". The text states security must be commensurate with risk. The instructor underlines three key components of threat and risk assessment: "identification of applicable threats", "recognition of vulnerability", and "probable loss calculation". She also underlines "centrally located" regarding historical computer systems. The text explains that historically, management of issues was the responsibility of computer center staff. The instructor emphasizes the need to identify the source of threat. The visual focus is on the first paragraph of the document.

  2. 2:00 – 5:00 02:00-05:00

    The discussion shifts to the source of threats, which can be "external or internal". The instructor underlines this phrase. She highlights that historically, viruses were a major external threat, but now unauthorized intruders hacking vital information are a concern. She underlines the phrase "when an unauthorized intruder may try to hack upon organization's vital information and cause damage". The text notes internal threats are common due to employee access, as they know vulnerabilities. The instructor underlines "focus were to make available" in the context of historical staff responsibilities. The visual focus is on the second paragraph and the start of the third.

  3. 5:00 – 10:00 05:00-10:00

    The topic moves to "Risk Analysis". The instructor writes "Source" and "Security" next to the heading. She underlines "The common questions asked in evaluating the risks are given below." Specific risks like "fire, earthquakes" are underlined. For loss analysis, she writes "Financial loss, Reputation, legal issue" next to the text about suffering from a halt. She underlines "time permissible for recovery of operation". The text asks if the scope of effects has been made clear. The instructor underlines "scope of their effects on the information system". The visual focus is on the bullet points under Risk Analysis.

  4. 10:00 – 15:00 10:00-15:00

    The lecture covers "Security policy". The instructor underlines "security policy in writing". She lists four issues: Authentication, Authorization, Information integrity, and Detection. Next to Authorization, she writes "Read + Write". She underlines "Performing the Risk Assessment and Determining Vulnerabilities". She writes "Effective Security" and "Select Tools". She underlines "written information security policy", "sound security policy guidelines", and "well-designed system architecture". She also underlines "physical security", "employee education", and "testing". The visual focus is on the Security Policy section.

  5. 15:00 – 20:00 15:00-20:00

    The focus is on third-party vendors. The instructor underlines "security-related clauses of a written contract" and "data confidentiality, system security, and notification procedures". She underlines "comprehensive analysis of the provider's security program". The text discusses assessing business sensitivity of information, where the instructor writes "Account -> Sensitive". She underlines "Assessing the risks posed by service provider or business partner". She also underlines "Determining legal implications of security breaks". The visual focus is on the text regarding third-party contracts.

  6. 20:00 – 22:51 20:00-22:51

    The final section covers "Quantitative Risk Analysis" and "Qualitative Risk Analysis". The instructor writes "Numbers" next to Quantitative. She underlines the formula "Estimated Loss = Potential loss due to the event x Probability" and writes an example "1000 x 0.1 = 100%". For Qualitative, she writes "UPB". She underlines "institution's systems, networks, and information assets" and discusses how transactional banking poses greater risks than information-only websites. She underlines "Performing the Risk Assessment and Determining Vulnerabilities" again. The visual focus is on the final sections of the document.

The lecture systematically builds a framework for understanding information security risks. It starts with the fundamental definition of risk assessment, moving through the identification of threat sources and the historical context of system management. The instructor then guides students through the practical application of risk analysis by asking critical questions about disasters, financial impact, and recovery. The session emphasizes the role of security policy in mitigating these risks, detailing specific controls like authentication and authorization. Finally, the distinction between quantitative and qualitative analysis methods is clarified, providing students with both numerical and descriptive tools for evaluating security posture.

Loading lesson…