Assessing Risk

1st week file downloaded for reference: (this is the topic)

This week, you will submit a draft of your Key Assignment template. Make sure to add the new material to this document in Section 4. Remember to incorporate any previous feedback into the appropriate sections.

Part 1: Key Assignment Draft

During this week’s IP, you will submit a first draft of your Key Assignment from Weeks 1–4, as follows:

• Section 1: Information Security Management
  • This section will be used to describe the organization and establish the security model to be used by the organization.
• Section 2: Security Program
  • This section will focus on existing frameworks that can help in the implementation of a security plan and what a security organization should look like.
• Section 3: Security Policies
  • This section looks at security policies and their creation.
• Section 4: Assessing Risk
  • This section will focus on risk assessments and methodologies used to perform one.

The project deliverables for Week 4 are as follows:

• Section 4: Assessing Risk
  • This week will focus understanding the risk that an organization’s information systems face. You will review the risk assessment methodology and understand some of the basic terms that are associated with risk.
    • Describe a methodology that can be used to conduct a risk assessment for an organization.
    • Describe the 4 methods for dealing with identified risk.
    • Describe the following terms:
      • Vulnerabilities
      • Threats
      • Exploits
    • Include a discussion about how they apply to a risk assessment.
  • This information should be 2–3 pages of details.
• Name the document "yourname_IT454_IP4.doc."