Reference no: EM131435277
Module Case
RISK ASSESSMENT
Assignment Overview
Information Systems have become the foundational platforms for many organizations and businesses to carry out their missions and business functions. Hence, managing the security risk related to the use and operation of the information systems has also become a critical component of managing organizational risks. The following article provides an overview of managing information security risk, especially from the managerial perspective.
NIST (2011), "Managing Information Security Risk -- Organization, Mission and Information System View," National Institute of Standards and Technology Special Publication 800-39.
Effective risk management of information system security first asks for systematic risk assessment. The following article provides frameworks, fundamentals, and processes for risk assessment. Matrix are also suggested to guide detailed risk assessment of threats, their likelihood, and impacts, etc.
NIST (2011). Information Security -- Guide for Conducting Risk Assessments. National Institute of Standards and Technology Special Publication 800-30 Revision 1.
The following chapter in the Handbook of Information Security Management also covers the similar topics such as the risk assessment of threats and likelihood, qualitative and quantitative considerations of risk assessment and even some accounting methods. Even speaking in slightly different languages, the fundamentals and methods are similar.
Ozier, W. Section 3-1-Risk Analysis. Handbook of Information Security Management.
Case Assignment
After reading the above articles (the first two are documentations with many pages, please selectively read the important content rather than read word-by-word), please write a 3-5 page paper titled:
"How to Systematically Conduct Risk Assessments of Information System Security Risks? -- Fundamentals and Methods"
Assignment Expectations
Please address the following issues in your paper:
1. The importance of risk management for information system security
2. The principles and fundamentals of risk management of information system security
3. The importance and fundamentals of risk assessment of information system security
4. The methods of risk assessments including processes, matrix, calculations, etc.
5. The challenges and solutions to risk assessments that are particularly interesting to you.
|
Current federal deficit-current federal debt
: Using only.gov Websites report the current GDP, the current Federal deficit, the current Federal debt, and the bottom line of the current (last) budget approved by Congress (surplus or shortage). Note that the fiscal year for the federal governmen..
|
|
Current federal deficit-current federal debt
: Using only.gov Websites report the current GDP, the current Federal deficit, the current Federal debt, and the bottom line of the current (last) budget approved by Congress (surplus or shortage). Note that the fiscal year for the federal governmen..
|
|
Strategic staffing plan before employees leave
: Like any other area of your business, good staffing requires careful attention and planning. Looking for new hires after someone leaves is simply crisis management, and it can really cost you in the long run, especially if you make a bad hiring decis..
|
|
Accept on purchase of the business
: To help him achieve this goal, a wealthy aunt is willing to loan the entrepreneur $5 million for five years at zero percent interest. Given this loan, what is the lowest rate of return the entrepreneur should be willing to accept on purchase of th..
|
|
How to systematically conduct risk assessments of iss risks
: ITM 527- "How to Systematically Conduct Risk Assessments of Information System Security Risks? -- Fundamentals and Methods"
|
|
Determining the npv decision rule
: Using these cash flows, suppose the firm uses the NPV decision rule. At a required return of 11 percent, should the firm accept this project? What if the required return is 24 percent?
|
|
Create an argumentative essay explaining
: Create an argumentative essay explaining what makes a good business decision. This allows students to use critical thinking in their research to identify the importance of deductive reasoning and inductive reasoning.
|
|
Consider the various training and development formats
: Consider the various training and development formats described in chapter 8. Which three do you think would be most effective for developing the skills of IT engineers? Which do you think would be the least effective?
|
|
What are the risks of taking courses out of sequence
: Why is following the Preferred Course Sequence important? What are the risks of taking courses out of sequence
|