Written Summary (15-16 pages) and ppt For the Scenario

1. Conduct a Risk Assessment (Quantitative, Qualitative, or Semi Quantitative, Frame, Scope, Asset Valuation, Tier 1 thru 3, Vulnerability, Current State and security posture (i.e. controls or lack of), Maturity CMMI 0 thru 5 0 Non-existent, 1 Intimal adhoc, 2 Planned, 3, Well Defined, 4 Quantitively Managed, 5 Optimized)
2. Create a Risk Mitigation Plan (Reduce risk, by mitigation, transfer, avoid, or acceptance)
3. What laws, treaties or conditions apply? (Compliance)
4. Perform a BIA (Business Impact Analysis)
5. Create a BCP (Business Continuity Plan)
6. Create a DRP (Disaster Recovery Plan)
7. Create a CIRP (Cyber Incident Response Plan)

Scenario (CIO for a major online store): 

You are the CIO for a major online store.  It specializes in goods for the elderly  with things such as clothes, support items, orthopedic appliances, etc. Many medical supply chains rely upon your company to deliver goods their clients. Your company currently specializes in goods for the west coast. You have centers in Seattle, Los Angeles, and Sacramento. 

Each city has a data center which houses 10 physical servers, over 1000 virtual servers, and hosts their nearly 7,500 employees along with customers and vendors.