NEED THIS IN 2 HOURS!! Systematically Conduct Risk Assessments of Information System Security Risks? --

http://csrc.nist.gov/publications/nistpubs/800-39/SP800-39-final.pdf

http://csrc.nist.gov/publications/drafts/800-30-rev1/SP800-30-Rev1-ipd.pdf

Case Assignment

After reading the above articles (the first two are documentations with many pages, please selectively read the important content rather than read word-by-word), please write a 3-5 page paper titled:

"How to Systematically Conduct Risk Assessments of Information System

Security Risks? -- Fundamentals and Methods"

Assignment Expectations

Please address the following issues in your paper:

1. The importance of risk management for information system security

2. The principles and fundamentals of risk management of information system

security

3. The importance and fundamentals of risk assessment of information system

security

4. The methods of risk assessments including processes, matrix, calculations, etc.

5. The challenges and solutions to risk assessments that are particularly interesting to you

MUST HAVE IN TEXT CITATIONS THAT MATCH REFERENCES; MUST HAVE LESS THAN 7% SAFEASSIGN/TURNITIN SCORE