Inventory

• Identify and categorize assets and access
• Identify and categorize risks to assets and access

Assets and Access
• Physical
• Staff
• Financial
• Information
• Network
• Technology
• Business Process

Risk Inventory
• Access = Risk
• Untargeted Attacks: driveby shootings and staging areas
• Targeted Attacks: Who is the Attacker?
• Acts of God: Insurance

These inventories let us create a Threat Profile based on
• Value of assets
• Risks of compromise

The Inventory and Threat Profile suggest strategies for countermeasures.