Week 9 Reflection: Which Risk Deserves the Next Dollar?

Use your defense budget and My IoT Threat Model worksheet.

Write 150 to 250 words, or record an equivalent explanation, responding to this prompt:

Two IoT risks are both real, but you can fully address only one this month. How should a defender decide which one comes first?

Include:

• one asset
• one trust boundary
• likelihood and impact
• confidence in the evidence
• one chosen control
• residual risk after the control
• one assumption that could change your priority

Finish with:

I would change my priority if ________, because ________.

Do not base the answer on which device sounds most frightening. Base it on the system, evidence, and consequence.