...

Internal control processes

Threat and Vulnerability Identification

Vulnerability

Threat-source

Intent/Situation

Method

Category of Harm

Likelihood

Impact

 

 

 

 

Inconvenience, distress or damage to standing or reputation

 

 

 

 

 

 

Financial loss or agency liability

 

 

 

 

 

 

Harm to agency programs or public interest

 

 

 

 

 

 

Unauthorized release of sensitive information

 

 

 

 

 

 

Civil or criminal violations

 

 

 

 

 

 

Inconvenience, distress or damage to standing or reputation

 

 

 

 

 

 

Financial loss or agency liability

 

 

 

 

 

 

Harm to agency programs or public interest

 

 

 

 

 

 

Unauthorized release of sensitive information

 

 

 

 

 

 

Civil or criminal violations

 

 

 

 

 

 

Inconvenience, distress or damage to standing or reputation

 

 

 

 

 

 

Financial loss or agency liability

 

 

 

 

 

 

Harm to agency programs or public interest

 

 

 

 

 

 

Unauthorized release of sensitive information

 

 

 

 

 

 

Civil or criminal violations

 

 

 

 

 

 

Inconvenience, distress or damage to standing or reputation

 

 

 

 

 

 

Financial loss or agency liability

 

 

 

 

 

 

Harm to agency programs or public interest

 

 

 

 

 

 

Unauthorized release of sensitive information

 

 

 

 

 

 

Civil or criminal violations

 

 

 

 

 

 

Inconvenience, distress or damage to standing or reputation

 

 

 

 

 

 

Financial loss or agency liability

 

 

 

 

 

 

Harm to agency programs or public interest

 

 

 

 

 

 

Unauthorized release of sensitive information

 

 

 

 

 

 

Civil or criminal violations