Risk assessment plan paper
Information Security and Risk Management Risk ASSessment Plan University of the Cumberlands
Executive Summary
<Copy your Executive Summary from your ‘Part-I Task-1’ Risk Management Plan.>
Risks – threats – weaknesses within each domain
<Using the table from your ‘Part-I Task-1’ Risk Management Plan, complete the table on Page #2 of this template (review your Lab #4 solution). For the Risk Factor/Impact column use the following:
“1” is Critical: an R-T-W that impacts compliance and places the organization in a position of increased liability.
“2” is Major: an R-T-W that impacts the C-I-A of an organization’s intellectual property assets and IT infrastructure.
“3” is Minor: an R-T-W that can impact user or employee productivity or availability of the IT infrastructure
Copy the R-T-W from your ‘Part-I Task-1’ Risk Management Plan and update it to address the Risk Impact/Factors from the table>
Compliance Laws and Regulations
< Summarize your Compliance Laws and Regulations from your ‘Part-I Task-1’ Risk Management Plan >
R-T-W
Domain Impacted
Risk Impact / Factor
Risk : Threat : Weakness :
Risk : Threat : Weakness :
Risk : Threat : Weakness :
Risk : Threat : Weakness :
Risk : Threat : Weakness :
Risk : Threat : Weakness :
Risk : Threat : Weakness :
Risk : Threat : Weakness :
Risk : Threat : Weakness :
Risk : Threat : Weakness :
Risk : Threat : Weakness :
Risk : Threat : Weakness :
Risk : Threat : Weakness :
Risk : Threat : Weakness :
Risk : Threat : Weakness :
Risk : Threat : Weakness :
Table 1
Risk Assessment Checklist
Category Risk Impact Likelihood Difficulty of Detection
Organizational Project lacks Executive-level Sponsor 1 1
Budget reduces team’s capacity 3 3
Management insist on decisions that lengthen schedule 5 5
Inefficient team structure reduces productivity 7 7
Review/decision cycle slower than expected 9 9
Vendor tasks take longer than expected 1 1
Staff Hiring resources takes longer than expected 3 1
Work from a prior project not be completed on time 5 3
Low motivation reduces productivity 7 4
Lack of skills increases defects 9 6
Personnel with critical skills unavailable 1 3
Personnel need extra time to learn unfamiliar tools 3 3
Contractors leave before the project completion 5 6
Conflicts between team result in errors and extra rework 7 6
Development Environment Facilities not be available on time 9 9
Facilities inadequate 1 1
Development tools may not be in place by the desired time 3 1
Development tools may not work as expected 5 1
Learning curve for new tools longer than expected 7 1
User User requirements are unstable 9 1
User review/decision cycles slower than expected 1 9
Users may not participate in review cycles 3 3
Users may not accept the end product 5 5
Users may have expectations than cannot be met 7 7
Contractor Contractor may not deliver work when promised 9 9
Contractor may deliver low quality products 1 1
Contractor may have other high-priority work 3 3
External Product depends on government regulations 5 5
Product depends on draft technical standards 7 7
Specifications poorly defined 9 9
Additional requirements added 1 1
Error-prone modules may require more testing 3 3
Components may not be easily integrated 5 5
Schedule Schedule, resources, and product definition unclear 7 7
Schedule is over-optimistic 9 9
Schedule omits necessary tasks 1 1
Excessive schedule pressure may reduce productivity 3 3
Schedule includes several tasks that have multiple predecessors 5 5
Schedule includes milestones that have not been clearly defined 7
