I’ve attempted Magerit, with the following results: I added a new classification to every asset that would be used in the Magerit equation, called it primary loss magnitude. I instructed Magerit to take this value to determine the impact. I then told Magerit to use the event frequency classification from the asset risk to represent likelihood. Primary loss magnitude is populated for every asset. When I look at the asset based risks, however, instead of allowing me to use the classification, I get an error:
It seems you aret trying to use Magerit as a calculation method but one of the following is missing:
One or more asset classifications have missing numeric value (Asset Management / Settings / Classifications)
One or more identified assets (Asset Management / Asset Identification) are missing some classification
It would appear that Magerit is looking for two classifications from the asset to determine risk value
Much like the native eramba risk classification is using two classifications from the risk to calculate the risk’s value
What I need is to be able to combine impact associated with the asset (the asset value if you will) with the likelihood of the risk event happening.