July 2019 AST Magazine AST July 2019 Magazine | Page 70
To www.AmericanSecurityToday.com
summarize, CAIRA quantifiably mea-
sures vulnerability and risk, prioritizes
recommended countermeasures, pri-
oritizes facilities, and compares cost
and countermeasure effectiveness.
The performance of July
CAIRA
not driv-
2019 is - Edition
35
en by regulation or design standards;
therefore, the Design Basis Threats
(DBT) must be identified before cost-
effective recommendations can be gen-
erated.
HSS works with the customer to iden-
tify Single-Point Failures and other
critical assets or processes within the
organization.
Unlike standard vulnerability
assessments, CAIRA quantifies
risks and vulnerabilities,
determines the cost
effectiveness of specific
improvements,
and helps prioritize
countermeasures.
Most
importantly,
CAIRA lets
the customer
know how vulner-
able the asset is, what to do to reduce
the vulnerability, how effective the rec-
ommendations will be in reducing the
vulnerability, and at what cost.
Regardless of the type of analysis or Typical CAIRA (Critical Asset and Infrastruc-
study, the resulting recommendations ture Risk Analysis) Risk Reduction Charts
need to be based on a given hazards.
68