The evaluation template chosen upon assessment creation defines the properties that need to be evaluated. If you are using the Standard Evaluation Template the properties to evaluate are Asset Value, Integrity, Confidentiality and Availability. The example values for the properties are Immense, Very High, High, Medium or Low. The definitions of these terms can be found in the Definitions of Asset Properties and can be adjusted as needed via the Evaluation Templates. It is important to review and adjust the definitions to ensure that the results are always the same when Risk Assessments are repeated.

Value (1)

The Value of the Asset must be assessed. This Value is used when calculating Security Risks. The Value of the Asset can be Immense, Very High, High, Medium, or Low.

Confidentiality (2)

How important the Confidentiality of a particular Asset is to the organization must be qualified. An example would be that a server has an immense value while an office would have a high one.

Integrity (3)

The value of Integrity is based on how important the correctness of the given Information Asset is to the company. An example would be that a certain file or database is of immense value while another has a low one.

Availability (4)

The value of Availability is based on how important it is for the organization to have the Asset readily available. An example could be that the Office has a Very High value while an archive has a Medium value.