Question

Suppose P(o|e) = 1. Is this bad? When might this be bad? When might this be not bad? Explain. A. What impact does a security policy have on the form of an event tree you create? Refer to the Wikipedia article on Security Policy to jog your memory. B. Finally... do some Internet sleuthing to learn about the following two concepts: (i) Reason’s Swiss Cheese Model, and (ii) Defense in Depth. Explain each in terms of its relevance to security risk management

Answer 1

SUMMARY:Suppose P(o|e) = 1. Is this bad? When might this be bad? When might this be not bad? Explain. A. What impact does a security policy have on the form of an event tree you create? Refer to the Wikipedia article on Security Policy to jog your memory.

the questions states that

The interpretation for the above statement is that either the event E=O or O is a subset of E.

i) in the context of the swiss cheese model we can say that events corresponding to failures are certain to happen if the experiment is performed assuming O= failure, E= experiment.

ii) if we assume that the event O corresponds to delaying while E is the probability of attacking on the system, then it is certain that if an attack occurs it will lead to a daley.