Can PTA Risk Value exceed systems Total Assets Value?
System risk is calculated by summing the risk to each of the systems assets. The value, presented in percents relative to the total value of all assets, can exceed 100%. It is clear that the actual damage to the systems assets cannot exceed 100%; however, the risk level does not express the actual damage. It reflects the amount of effort that has to be invested in order to mitigate the threats to the system, and since neither the number of threats nor their severity is limited, the risk quantities are not limited to 100%. For the users convenience, a marker line indicating the 100% risk level was added to the system risk status history graph.
