In this section, you will prepare a risk mitigation plan using SimpleRisk. Before using SimpleRisk, you will create a paper-based plan. You will need to create three security controls in your risk mitigation plan: one control that reduces the asset value, one that reduces the vulnerability severity, and one that reduces the threat impact. Your security controls should also include examples of both strategic and tactical controls. You can refer to the following table for a clearer picture of the requirements. Security Control Reduces Level (strategic/tactical

In this section, you will prepare a risk mitigation plan using SimpleRisk. Before using SimpleRisk, you

will create a paper-based plan.

You will need to create three security controls in your risk mitigation plan: one control that reduces the

asset value, one that reduces the vulnerability severity, and one that reduces the threat impact. Your

security controls should also include examples of both strategic and tactical controls. You can refer to

the following table for a clearer picture of the requirements.

Define three security controls designed to mitigate the risk associated with a recent leak of sensitive

information that was stored in cleartext files.

Once you have identified your security controls, use SimpleRisk to create a Risk Mitigation plan. You

do not need to perform a management review in this section.