image_pdfimage_print

How to Harden WordPress Powered Websites?

Millions of websites are powered by WordPress software and there’s a reason for that. WordPress is the most developer-friendly content management system out there, so you can essentially do anything you want with it. Unfortunately, that has some downsides as well.

For example, if you don’t change your default configuration, hackers and some pesky users with too much curiosity immediately know where to log in to get into your admin area. In WordPress, you can just type in domain.com/wp-admin and it will take you right to the login screen.

Here, I have compiled a set of Checklist before releasing out the Live Site.

Continue reading “How to Harden WordPress Powered Websites?” »

The Document is a PDF and can be Downloaded

What is ALE, ARO, SLE.?

Quantitative Risk Assessment

Quantitative assessment deals with numbers and dollar amounts. It attempts to assign a cost (monetary value) to the elements of risk assessment and to the assets and threats of a risk analysis.

To fully complete a quantitative risk assessment, all elements of the process (asset value, impact, threat frequency, safeguard effectiveness, safeguard costs, uncertainty, and probability) are quantified. Therein lies the problem with purely quantitative risk assessment: It is difficult, if not impossible, to assign dollar values to all elements; therefore, some qualitative measures must be applied to quantitative elements. A quantitative assessment requires substantial time and personnel resources. The quantitative assessment process involves the following three steps:

  1. Estimate potential losses (SLE)
  2. Conduct a threat analysis (ARO)
  3. Determine annual loss expectancy (ALE)

Continue reading “What is ALE, ARO, SLE.?” »

Annual loss expectancy (ALE)

The expected value (cost) of a yearly occurrence of incidents of given type, in monetary units. It is a product of SLE and ARO (SLE*ARO). The ALE for each type of incident is different.

 

Annual rate of occurrence (ARO)

Expected number of an incident’s occurrences during a calendar year. For rare incidents, it is equivalent to a probability of one or more incidents during a year; for frequent incidents, it is equivalent to the expected number of incidents per year. The ARO for each type of incidents is different.

Gross margin

The difference between revenue and cost before accounting for certain other costs. Generally, it is calculated as the total selling price of the items sold (revenue), less the cost of goods sold (production or acquisition costs).

Overhead

The term here used for all costs borne by the entity besides the personnel costs.

Revenue (also called turnover)

The annual sum of all net invoices issued by a company, i.e. the total net price (without VAT) of all products sold during the fiscal year.

Single loss of expectancy (SLE)

The expected value (cost) of an incident in monetary units, assuming its single occurrence. The SLE for each type of incidents is different.

Total ALE (TALE)

The total expected annual loss expectancy from all types of incidents considered.