Reference no: EM133761199 , Length: word count:2500

IS Governance and Risk

Instruction:
This assessment item is designed to improve student learning skills and provide experience in critically analysing governance frameworks, assessing risk management strategies, and evaluating their impact on information systems. The student will present their findings in a well-researched and referenced report.

Assignment Overview:
This assignment challenges you to critically evaluate an IS Governance framework and propose a risk management strategy for a given case study. Your goal is to demonstrate how effective governance and risk management can support the organization's overall strategy and operational objectives.

Objectives:
To enhance your ability to analyse governance frameworks within an organizational context.
To develop practical risk management strategies using industry-standard methodologies.
To critically evaluate the impact of governance and risk management on information systems operations.

Assignment Details:
Case Study Analysis: You can choose a case study that describes a business scenario involving governance and risk issues from last 5 years Journals or conferences paper. Carefully read and analyse the case to understand the underlying governance challenges and risks.

Governance Framework Assessment:

Framework Selection: Select an appropriate IS Governance framework (e.g., COBIT, ITIL, ISO/IEC 38500).

Analysis: Critically assess the selected framework's ability to address the governance challenges identified in the case study.

Implementation Plan: Propose a plan for implementing the framework within the organization, including key roles, responsibilities, and processes.

Risk Management Strategy:

Risk Identification: Identify the key risks associated with the IS operations described in the case study.

Risk Assessment: Evaluate the likelihood and impact of these risks using a recognized risk assessment methodology.

Mitigation Plan: Develop a risk mitigation plan that includes preventive, detective, and corrective controls.

Expected Outcomes: Discuss the expected outcomes of implementing your governance and risk management strategies, including potential benefits, challenges, and impacts on organizational performance.

Key Elements of the Assessment:

Introduction: Provide an introduction or background to the governance and risk issues, including an identification of gaps in the current approach.

Governance Framework: Analyze the selected governance framework, including its strengths, weaknesses, and applicability to the case study.

Risk Management: Present a comprehensive risk management strategy, detailing the identification, assessment, and mitigation of risks.

Implementation: Discuss the practical steps for implementing your governance and risk management strategies within the organization.
Conclusion: Summarize your findings and suggest areas for further improvement or research.

Suggested case studies:

Equifax Data Breach (2017): Examine the governance and risk failures that led to one of the largest data breaches in history and the role of IS governance in preventing such incidents.
Facebook-Cambridge Analytica Scandal (2018): Investigate the governance failures that allowed the misuse of user data and explore potential risk management strategies to mitigate data privacy issues.
Target Data Breach (2013): Analyze how inadequate governance frameworks and risk management led to the exposure of customer credit card information.
Maersk Cyberattack (2017): Study the NotPetya ransomware attack on Maersk and evaluate how IS governance frameworks could have helped mitigate the impact.
British Airways GDPR Fine (2019): Assess how poor data governance and risk management led to a GDPR violation and what governance framework could prevent similar risks.
Uber Data Breach (2016): Explore Uber's handling of the data breach, the lack of IS governance, and how a stronger risk management framework could have reduced the impact.
Yahoo Data Breaches (2013-2014): Review the governance and security risks that resulted
in Yahoo's massive data breaches and subsequent downfall.
Capital One Data Breach (2019): Examine the security governance issues that led to the exposure of sensitive customer information and potential improvements using IS frameworks.
Sony PlayStation Network Hack (2011): Analyze the governance and security failures in
Sony's systems that resulted in a prolonged data breach affecting millions of users.
SolarWinds Cyberattack (2020): Investigate the sophisticated supply chain attack on SolarWinds and evaluate governance strategies to manage the associated risks effectively.
Marriott International Data Breach (2018): Study the governance and risk management lapses that led to the exposure of over 500 million customer records, and analyze how better frameworks could have prevented it.
Anthem Health Insurance Data Breach (2015): Explore the governance issues surrounding the health insurer's data breach that compromised sensitive health data and evaluate risk management strategies.
Tesla Insider Sabotage Case (2018): Investigate the insider threat incident at Tesla and assess how IS governance could manage and mitigate insider risks.
Australian National University Cyberattack (2018): Analyze how inadequate governance frameworks contributed to the compromise of sensitive student and staff data, and propose a risk mitigation strategy.
TikTok Data Privacy Concerns (2020): Review the governance issues related to TikTok's data

collection and privacy policies and explore the potential risks and governance frameworks to address these concerns.
Colonial Pipeline Ransomware Attack (2021): Examine the governance and security failures that allowed a ransomware attack to disrupt critical infrastructure and assess the risk management strategies.
WannaCry Ransomware Attack (2017): Investigate how inadequate governance and security measures enabled the rapid spread of the WannaCry ransomware globally and the lessons learned for future risk management.
Ashley Madison Data Breach (2015): Study the governance failures that led to the leak of sensitive user information from the Ashley Madison platform and discuss preventive IS governance measures.
Microsoft Exchange Server Vulnerability (2021): Analyze the governance and risk
management lapses that led to widespread exploitation of vulnerabilities in Microsoft's
Exchange Server and the potential mitigations.
Experian Data Breach in South Africa (2020): Review the governance and risk management failures that led to the exposure of personal information for millions of South Africans, and propose governance improvements.