An inventory.
ACCOUNT COMPROMISE
Someone gaining access to an account you control.
DEVICE COMPROMISE
Malicious software on a computer or phone.
DATA LOSS
Information destroyed, encrypted or taken.
FINANCIAL FRAUD
Money diverted, through deception or compromised systems.
SERVICE DISRUPTION
Something you rely on being unavailable.
SUPPLY CHAIN RISK
A supplier or service you use being compromised.
INSIDER RISK
Harm from someone with legitimate access, deliberate or accidental.
THAT LAST ONE
Mostly accidental. Mistakes outnumber malice considerably.
PHYSICAL RISK
Devices lost, stolen, or accessed by someone present.
WHAT TO ASSESS FOR EACH
How likely, how damaging, and what reduces it.
WHAT TO DO WITH THE LIST
Rank by what would hurt most, and address those first.
