INF80043 IT Risk Management Project

Carry out an extensive review of risks on the company’s IS/IT/Information security management practices by:

Identifying and detailing all key components of risk, vulnerabilities, threat as well as their impact to the company.

The risk assessment needs to be conducted in accordance to the best practice prescribed by one (or a hybrid) of the leading standards, guidelines, or framework pertaining IS/IT/Information security.

A coherent IS/IT/Information security risk mitigation strategy that provides proactive solutions for the risks identified in the Risk Assessment stage

Identify further opportunities of risk management activities within the company.

Produce a risk analysis report of the company to be submitted to the company’s senior executive (remember: the audience of your report is going to be the senior executives – the C-level individuals of the organisation)

Your task is to produce a report addressing the above requirements. It is important to note that the use of established standards, frameworks and best practice in the process is highly valued and sought after by the senior executives.