Reference no: EM131192167
Assignment: Defining the Scope and Structure for an IT Risk Management Plan
Overview
In this lab, you defined the purpose of an IT risk management plan, you defined the scope for an IT risk management plan that encompasses the seven domains of a typical IT infrastructure, you related the risks, threats, and vulnerabilities to the plan, and you created an IT risk management plan outline that incorporates the five major parts of an IT risk management process.
Lab Assessment Questions & Answers
1. What is the goal or objective of an IT risk management plan?
2. What are the five fundamental components of an IT risk management plan?
3. Define what risk planning is.
4. What is the first step in performing risk management?
5. What is the exercise called when you are trying to gauge how significant a risk is?
6. What practice helps address a risk?
7. What ongoing practice helps track risk in real time?
8. True or False: Once a company completes all risk management steps (identification, assessment, response, and monitoring), the task is done.
9. Given that an IT risk management plan can be large in scope, why is it a good idea to develop a risk management plan team?
10. In the seven domains of a typical IT infrastructure, which domain is the most difficult to plan, identify, assess, treat, and monitor?
11. Which compliance laws or standards does the health care organization mentioned in the Hands- On Steps have to comply with (consider these: Health Insurance Portability and Accountability Act [HIPAA], Gramm-Leach-Bliley Act [GLBA], and Family Educational Rights and Privacy Act [FERPA])? How does this impact the scope and boundary of its IT risk management plan?
12. How did the risk identification and risk assessment of the identified risks, threats, and vulnerabilities contribute to your IT risk management plan outline?
13. What risks, threats, and vulnerabilities did you identify and assess that require immediate risk mitigation given the criticality of the threat or vulnerability?
14. For risk monitoring, what are some techniques or tools you can implement in each of the seven domains of a typical IT infrastructure to help mitigate risk?
15. For risk mitigation, what processes and procedures can help streamline and implement risk- mitigation solutions to the production IT infrastructure?
16. What is the purpose of a risk register?
17. How does risk response impact change control management and vulnerability management?
|
Matter are present inside the container
: A 50.0 g piece of CO2(s) (i.e. "dry ice") is sealed inside a0.250 L container held at 20°C. Based on the phase diagram of CO2(Figure 11.42 in the textbook), what state(s) of matter are present inside the container?
|
|
How was your professional work impacted by the stressor
: In this portion of the paper, you should provide information from the textbook and an additional source identified from the CSU Library to analyze the impact that the stressful event could have placed upon your health, future goals, and motivation..
|
|
Supply chain management is the purchasing strategy
: One of the most strategic decisions facing a company in supply chain management is the purchasing strategy. In most industries, cost of raw materials and procured components consume a significant portion of the company's budget.
|
|
Deployment services and the windows automated installation
: For a highly virtualized data center, how does this change the deployment options available from traditional data centers? Is there any benefit or need in using some of the traditional deployment options (e.g., disk imaging using software like Gho..
|
|
What is the first step in performing risk management
: What is the first step in performing risk management? What is the exercise called when you are trying to gauge how significant a risk is? What practice helps address a risk? What ongoing practice helps track risk in real time?
|
|
Biggest dangers of bring your own device
: What do you think are the biggest dangers of bring your own device (BYOD)? What are the best ways for a company to protect against this threat? Justify your answer
|
|
Prevalent mobile computing limitations
: What do you think are the most prevalent mobile computing limitations? Justify your answer
|
|
Information assurance capstone
: 1. In the connection of data preparing, PC security and trusted frameworks, clarify what is implied by the accompanying terms and why we need to utilize them:
|
|
Prepare a tender for the installation of steel street lamps
: Prepare a tender/estimate for the installation of 20 steel street lamps in 5 streets of a small town to replace ageing concrete lamp standards
|