public static void ResetRisk(Database.ThreatRisk risk)
{
risk.IsoImpact = risk.IsoProbability = risk.IsoRisk =
risk.NsRisk =
risk.NsThreat = risk.NsValue = risk.NsVulnerability = 1;
ResetCalculatedRisk(risk);
}
public static void ReduceRisk(Database.ThreatRisk parent, Database.ControlRisk child)
{
parent.CalculatedIsoProbability = Math.Max(1, (int)Math.Round(parent.CalculatedIsoProbability * (1f - (double)child.IsoProbability / 100f)));
parent.CalculatedIsoImpact = Math.Max(1, (int)Math.Round(parent.CalculatedIsoImpact * (1f - (double)child.IsoImpact / 100f)));
parent.CalculatedNsValue = Math.Max(1, (int)Math.Round(parent.CalculatedNsValue * (1f - (double)child.NsValue / 100f)));
parent.CalculatedNsThreat = Math.Max(1, (int)Math.Round(parent.CalculatedNsThreat * (1f - (double)child.NsThreat / 100f)));
parent.CalculatedNsVulnerability = Math.Max(1, (int)Math.Round(parent.CalculatedNsVulnerability * (1f - (double)child.NsVulnerability / 100f)));
parent.CalculatedIso = parent.CalculatedIsoImpact * parent.CalculatedIsoProbability;
parent.CalculatedNs = parent.CalculatedNsValue * parent.CalculatedNsThreat * parent.CalculatedNsVulnerability;
}
public static void ResetCalculatedRisk(Database.ThreatRisk risk)
{
risk.CalculatedIsoImpact = risk.IsoImpact;
risk.CalculatedIsoProbability = risk.IsoProbability;
risk.CalculatedNsThreat = risk.NsThreat;
risk.CalculatedNsValue = risk.NsValue;
risk.CalculatedNsVulnerability = risk.NsVulnerability;
risk.IsoRisk = risk.IsoProbability * risk.IsoImpact;
risk.NsRisk = risk.NsVulnerability * risk.NsThreat * risk.NsValue;
risk.CalculatedIso = risk.IsoRisk;
risk.CalculatedNs = risk.NsRisk;
}
