Reference no: EM133053353

You are a risk manager for a government agency that collects confidential health information from your clients. The governing board is concerned about the potential for cyber attack and loss of confidential private data. The board has little experience in technology risks since all of its members are aged in their sixties and have worked all their careers in government administration.

The agency is considering the cheapest option of outsourcing the processing and handling of data to a third-party company operating in an emerging country. The company uses manual data entry, pays below minimum wages and has poor working conditions. The governing board is provided with no alternatives to consider. If it does not reduce costs, the agency will not be able to deliver its services in the future.

The third-party company is involved in a significant legal battle resulting from a prior data breach that, if successful, could result in the company's bankruptcy.

Answer ALL of the following questions:

• Explain strategic risk and identify whether you believe it is material to this agency's decision. Do you consider this a low risk strategy for the agency?
• Identify and explain at least four (4) OTHER risks presented by the proposed strategy.
• Explain whether there are cognitive biases present in the decision.
• Describe how you could apply risk management to the decision making process to improve the outcome.