Risk Management
dcvjea
Comment1.docxMake sure to include the following in your plan: A list of assets and their values. Describe the assets within the scope of your assessment. (Asset, category, value, controls in place, etc.). Your table should include at minimum 6 assets. A Threat Assessment Table (Assets/Likelihood/Gravity) Recommendations based on your findings. (High Risk Areas)
Create a Risk Management Plan based on the following case:
You are an information systems security manager in a small airport and you were asked to conduct a security threat risk assessment for the airport’s web site and applications’ infrastructure. The airport has apparent weaknesses in its system of controls. Your predecessor did not have a security management plan in place because he was not sure which threats to address and in what order because he did not have a good handle on the information systems assets nor their value. You were asked to create a Security Threat Risk Assessment Plan. Use the
Risk Management Template
(.docx) to create your Risk Management Plan. The template is already populated with a lot of information to help you. Modify the template as appropriate for your project. Make sure to include the following in your plan:
1. A list of assets and their values. Describe the assets within the scope of your assessment. (Asset, category, value, controls in place, etc.). Your table should include at minimum 6 assets.
2. A Threat Assessment Table (Assets/Likelihood/Gravity)
3. Recommendations based on your findings. (High Risk Areas)
