RISK-005 Lack of Visibility into Suspicious Activities
Detalhes e análise do risco
Critical
Open
Operational
- Risk ID
- RISK-005
- Risk Title
- Lack of Visibility into Suspicious Activities
- Category (ISO 31000)
- Operational
- Risk Description
- Absence of adequate monitoring prevents threat detection.
- Risk Type
- Operational
- Responsável
- Not specified
- Status
- Open
- Applicable Framework
- Qriar IAM Security Framework
- Ativo de Informação
- Not specified
- Fonte de Ameaça
- Not specified
- Data de Revisão
- Not specified
Inherent Risk
| 1 | 2 | 3 | 4 | 5 | |
|---|---|---|---|---|---|
| Catastrófico | 5 | 10 | 15 | 20 | 25 |
| Maior | 4 | 8 | 12 | 16 | 20 |
| Moderado | 3 | 6 | 9 | 12 | 15 |
| Menor | 2 | 4 | 6 | 8 | 10 |
| Insignif. | 1 | 2 | 3 | 4 | 5 |
| Rare | Unlikely | Possible | Likely | Almost Certain |
Residual Risk
| 1 | 2 | 3 | 4 | 5 | |
|---|---|---|---|---|---|
| Catastrófico | 5 | 10 | 15 | 20 | 25 |
| Maior | 4 | 8 | 12 | 16 | 20 |
| Moderado | 3 | 6 | 9 | 12 | 15 |
| Menor | 2 | 4 | 6 | 8 | 10 |
| Insignif. | 1 | 2 | 3 | 4 | 5 |
| Rare | Unlikely | Possible | Likely | Almost Certain |
- Descrição do Cenário
- Not specified
-
Frequência Mín.
-
Frequência Máx.
-
Magnitude Mín.
-
Magnitude Máx.
-
Expectativa de Perda Anual (BRL)
- Resposta ao Risco
- Modify
- Response Status
- Planned
- Plano de Resposta
- Not specified
- Notas de Mitigação
- Not specified
| ID | Risk Description | Domínio |
|---|---|---|
| MON-001 | Centralize Audit/Sign-in Logs in a SIEM. Retention: 90 days (hot) / 365 days (cold). | Monitoring (MON) |
| MON-002 | Automatic blocking based on Risk (User/Sign-in Risk) for high-risk events. | Monitoring (MON) |
| MON-004 | P1 alerts for changes to Tier 0 groups (Global/Domain Admins) with out-of-band notification. | Monitoring (MON) |
No history recorded.
Inherent Score
16
Critical
Residual Score
16
Critical
Probability (1-5)
4/5
→
4/5
Impact (1-5)
4/5
→
4/5
Created on
17/12/2025 03:54
Atualizado em
26/02/2026 06:45