Risk assessment methodologies in Cybersecurity - Mini Project: Build & Apply

Risk Assessment Methodologies

📖 Scenario: You are part of a small company's cybersecurity team. Your manager has asked you to help understand different risk assessment methodologies to decide which one to use for the company's security planning.

🎯 Goal: Build a simple structured summary of common risk assessment methodologies, including their key features and typical use cases.

📋 What You'll Learn

Create a dictionary named methodologies with three risk assessment methods and their descriptions

Add a variable named selected_method to hold the preferred methodology name

Use a for loop with variables method and description to iterate over methodologies.items()

Add a final statement that assigns a summary string to a variable named summary describing the chosen method

💡 Why This Matters

🌍 Real World

Understanding risk assessment methodologies helps cybersecurity teams choose the best approach to identify and manage security risks effectively.

💼 Career

Knowledge of risk assessment methods is essential for roles like security analyst, risk manager, and cybersecurity consultant to plan and implement security controls.

1

Create the risk assessment methodologies dictionary

Create a dictionary called methodologies with these exact entries: 'Qualitative' with value 'Uses descriptive categories to assess risk levels.', 'Quantitative' with value 'Uses numerical values and data to calculate risk.', and 'Hybrid' with value 'Combines qualitative and quantitative approaches.'

Cybersecurity

# Create the methodologies dictionary with exact entries
# Your code here

Need a hint?

Use curly braces {} to create a dictionary with keys and values as strings.

2

Add the selected methodology variable

Add a variable called selected_method and set it to the string 'Hybrid' to represent the preferred risk assessment methodology.

Cybersecurity

methodologies = {
    'Qualitative': 'Uses descriptive categories to assess risk levels.',
    'Quantitative': 'Uses numerical values and data to calculate risk.',
    'Hybrid': 'Combines qualitative and quantitative approaches.'
}
# Set selected_method to 'Hybrid'
# Your code here

Need a hint?

Assign the string 'Hybrid' to the variable selected_method.

3

Iterate over the methodologies dictionary

Use a for loop with variables method and description to iterate over methodologies.items(). Inside the loop, add a comment line describing that you would process each method and its description here.

Cybersecurity

methodologies = {
    'Qualitative': 'Uses descriptive categories to assess risk levels.',
    'Quantitative': 'Uses numerical values and data to calculate risk.',
    'Hybrid': 'Combines qualitative and quantitative approaches.'
}
selected_method = 'Hybrid'

# Use a for loop to iterate over methodologies.items()
# Your code here

Need a hint?

Use for method, description in methodologies.items(): to loop through the dictionary.

4

Add the summary statement

Add a final line that creates a variable called summary and assigns it a string that says: "The selected risk assessment methodology is Hybrid: Combines qualitative and quantitative approaches." Use an f-string to include the selected_method and its description from the methodologies dictionary.

Cybersecurity

methodologies = {
    'Qualitative': 'Uses descriptive categories to assess risk levels.',
    'Quantitative': 'Uses numerical values and data to calculate risk.',
    'Hybrid': 'Combines qualitative and quantitative approaches.'
}
selected_method = 'Hybrid'

for method, description in methodologies.items():
    # Process each method and its description here
    pass

# Create summary string using selected_method and its description
# Your code here

Need a hint?

Use an f-string to combine selected_method and its description from methodologies.