ITC596 IT risk managemnet

Tasks:
You have been employed by Regional Gardens as their first ever Chief Information Officer (CIO). You have been tasked by the Board to conduct a review of the company’s risks.
1.As the first step, you are to provide a Risk Register for Regional Gardens. This risk register must contain, as a minimum:
a.A description of each risk identified.
b.A summary of the impact or consequence if the risk was to arise.
c.The inherent risk assessment (this is the assessed, raw/untreated risk inherent in a process or activity without doing anything to reduce the likelihood or consequence).
d.The key controls to mitigate the risk.
e.The residual risk assessment (this is the assessed risk in a process or activity, in terms of likelihood and consequence, after controls are applied to mitigate the risk)Prioritization of the risk using a standardized framework (such as the ANSI B11.0.TR3 Risk Assessment Matrix