case study

This week you'll be finalizing the testing of your process model. Prepare a draft action plan for Harry & Mae Case Study. 

You'll need to take your threat analysis and identify controls to put in place to address those threats and vulnerabilities.  Make sure each of the highest risk items you identified have a suitable action plan associated with it. 

Additionally, you need to ensure any impact of those controls is identified. For instance, does putting in a more advanced firewall impact any other element of the system? Does strengthening the password policy impact the information security awareness program?  Your audience is executives at Harry & Mae's Inc.