┌──────────────────────────────────────────────────────────────────────────────┐

┌──────────────────────────────────────────────────────────────────────────────┐ │ RISK INFORMATION SHEET │ ├──────────────────────────────────────────────────────────────────────────────┤ │ ID: MPL-01 Date: 10/10/25 Prob: 70% Impact: High │ ├──────────────────────────────────────────────────────────────────────────────┤ │ DESCRIPTION: │ │ Potential for data breach or unauthorized access due to weak authentication │ │ mechanisms, insecure configurations, or delayed security updates in the │ │ Mini Project Library platform. │ ├──────────────────────────────────────────────────────────────────────────────┤ │ ENVIRONMENT/CONTEXT: │ │ • Condition 1: Weak or reused student/educator passwords increase attack │ │ vulnerability │ │ • Condition 2: Some components may lack proper HTTPS configuration, risking │ │ sensitive data exposure │ │ • Condition 3: Delayed security updates or irregular audits may allow │ │ exploitation of vulnerabilities │ ├──────────────────────────────────────────────────────────────────────────────┤ │ MITIGATION/MONITORING: │ │ • Enforce strong password policies and enable two-factor authentication │ │ • Mandate HTTPS across all pages │ │ • Schedule regular software/security audits │ │ • Monitor access logs for suspicious activity │ ├──────────────────────────────────────────────────────────────────────────────┤ │ MANAGEMENT/CONTINGENCY PLAN/TRIGGER: │ │ • Activate emergency recovery plan │ │ • Inform affected users, reset credentials, and restore data from backups │ │ • Patch vulnerabilities immediately and re-run security audits │ │ • Trigger: Unusual access patterns or security alerts detected │ ├──────────────────────────────────────────────────────────────────────────────┤ │ CURRENT STATUS: │ │ As of 10/10/25: Password policy enforced, HTTPS enabled, security audits │ │ scheduled │ ├──────────────────────────────────────────────────────────────────────────────┤ │ OWNER: SOFTWARE ENGINEERING FACULTY │ │ ASSIGNED: MINI PROJECT LIBRARY TEAM │ └──────────────────────────────────────────────────────────────────────────────┘

08.10.2025 16:43