Risk Assessment plan

Broad criteria

Unsatisfactory

Satisfactory- Good

Business report: style, fluency, persuasive

Max Marks = 1

Max Marks = 2

language with assurance and precision in the

Lacked clarity. Spelling and

Some clarity evident, however

business report.

grammatical errors evident

work would benefit from closer

throughout. Work would benefit

attention to expression and

from proof reading. Submission

grammar. Submission attempts to

does not apply a business report

apply a business report structure to

structure to its presentation.

its presentation but areas for

Report items 1-4: Develop and provide an

Max Marks = 5

Max Marks = 7

introduction to the plan by explaining its

Knowledge of principles and

Demonstrates some knowledge of

purpose and importance. The risk appetite and

concepts of risk management

principles and concepts of risk

risk tolerance for the company; Create an

insufficient to communicate

management and is able to

outline for the completed risk management

intelligently about the topic.

communicate this. May lack some

plan; Define the scope and boundaries of the

Lacks clarity. Most responses

clarity. Most responses were

plan; Develop a proposed schedule for the risk

were very general with minimal

general with some understanding

management planning process.

or no little understanding of risk

of risk appetite and risk tolerance.

appetite and risk tolerance.

Scope, boundaries complete but

Scope, boundaries is

lacks discussing evidence of overall

disorganized, incomplete, or

risk management assessment.

lacks in evidence of overall risk

management assessment.

Report items 5-6: Identify the key roles and

Max Marks = 5

Max Marks = 7

responsibilities of individuals and departments

Knowledge of roles and

Demonstrates some knowledge of

within the organization as they pertain to risk

responsibilities with respect to

roles and responsibilities and is

assessment; Develop a proposed schedule for

risk assessment insufficient or

able to communicate this. Lacks

the RA process.

weakly communicated. Overall

some clarity in defining roles.

lacks clarity. Most responses

Response to schedule for RA

were very general with minimal

process may be missing some

or no little understanding of how

points..

to run RA process.

Report items 7-8: Carefully audit the case,

Max Marks = 5

Max Marks = 7

undertake an inventory and identify

Knowledge of principles and

Demonstrates ability to synthesis

information assets that includes both,

concepts insufficient to

and apply core concepts and

Cornersea’s most significant business

communicate intelligently about

principles. Addresses most of

information, and the information systems

the topic. Lacks clarity. Most

requirements and provides some

that must be accounted for in any approach

responses were very general

examples, demonstrating analysis

to risk management. Identifies information

with minimal or no examples

and organisation of assets, threats

assets and systems of organisation most at

relating back to the case assets,

and vulnerabilities with good case

risk; Identifies and provides an analysis of

threats and vulnerabilities.

context presented.

the threats and vulnerabilities that pose the

Analysis is disorganized,

greatest concern. (Identify 6 top risks)

incomplete, or lacking in

evidence of asset, threat and

vulnerability assessment.

Report items 9-10: Presents likelihood and

Max Marks = 5

Max Marks = 7

impact analyses for the threats and

Understanding of likelihood and

Demonstrates evidence of having

vulnerabilities identified. Prioritises risks and

impact analyses is not

understood core concepts and

presents a risk assessment table

demonstrated. Lack of

principles for likelihood, impact

understanding of what should be

analyses and approaches to

contained in a risk assessment

assessment. Core materials are

table and no other substantial

understood and capacity to

approach to evaluate or

synthesise is shown but report does

prioritise the material value of

not extend itself to a clear

assets or the effect of threats or

demonstration of mastery of all

vulnerabilities is shown.

important concepts.

Referencing and use of guidelines, standards,

Max Marks = 1

Max Marks = 2

frameworks and additional readings:

Either did not provide an

Provided a minimum of references

Demonstrated rigor of use of resources with

adequate list of references OR

from credible sources standards,

supporting references

included a bibliography instead

guidelines, frameworks Created a

& adherence to Harvard

i.e. not all references were cited

reference list but with significant

Guidelines

in the body of the report or vice

errors/omissions. Did not strictly

versa. Demonstrates very little

adhere to Harvard guidelines.

evidence of having read core

Provides some evidence of working

materials. Minimal or no

with sources but could improve

evidence of research to support

analysis of sources.

responses.

Original Score out of 55

0

Score out of 25

0

Late deduction (# of days) =

0

Final Mark (including deductions)

0.0