Conduct a risk assessment

Outcomes addressed in this Assignment:

Unit Outcomes:

Check your essay before you submit. See exactly what your professor sees.

See your AI and plagiarism results before your instructor does.Get the exact same report your professor uses. Trusted by 50,000+ students worldwide.

Get Plagiarism Report Humanize My Essay

• Conduct a risk assessment

• Develop security standards documentation

Course Outcomes:

IT499-5: Business Analysis: Evaluate the potential impact of information systems and technology on business

processes.

IT499-6: Project Management: Apply project management practices, tools, and methods.

Assignment Instructions:

Prepare the Risk Assessment and Security Standards documentation for your project.

The risk assessment report will range from physical threats, lack of policy implementation, and malicious

security attacks. For example, a fire and subsequent sprinkler system could damage servers, cabling, and the

workstations. System vulnerabilities could be exposed due to not implementing remote OS authentication,

providing unauthorized access to customer data. The lost laptop left at the airport security scanner with the

passwords disabled could result in any number of circumstances for compromised data integrity.

Security Standards documentation include identification of organizational objectives, strategies, and policies,

as well as determination of organizational security requirements. Discuss the controls and safeguards that are

put in place by the organization to protect against threats, reduce vulnerabilities, risk, and support

organizational objectives.

This document should follow a structured approach, and you should use the following outline. The items in

bold should be your paragraph headings. What follows the headings should be the content of that section.

Make sure that all of the following are covered in your paper:

• Risk Assessment: Document the vulnerabilities, threats and risks associated with your project.

• Risk Likelihood and Impact: Rate the possibility of risk taking place and impact it would have upon

organization, data integrity, public trust, and company value.

• Organizational requirements: Security requirements of the organization. Topics may include

administrative and physical safeguards to protect company and customer data.

• Key Individuals and Access Rights: The key individuals who should have access to the system. Also

address access rights for sub-contractors and any policies necessary to grant access on temporary basis.

• Security Policies: Proposed security polices for the new system and details of any organization security

requirements needed.

• Security Items: Detailed suggestions of software, hardware, and other security measures required.

• Budget Impact: How will the security costs increase the proposed budget, if at all?

• Conclusion: Conclusion and reference page.