Jesse Robinson
01/05/2014
Week 2 Project 1 part 1

Purpose: This risk management plan was called into development by the DLIS or the Defense Logistics Information Agency, a sub organization of the Defense Logistics Agency. Senior management at the DLIS has determined that the previous risk management plan for the organization is out of date and that a new risk management plan must be developed. Due to the importance of risk management to our organization, senior management is committed to and supportive of this project to develop a new plan.
Scope:
This plan as sanctioned by senior management of the DLIS will cover compliance laws and regulations that pertain to our organization. It will identify key roles and responsibilities of individuals and departments within the organization as they pertain to risk management. It will develop a proposed schedule for risk management’s planning process, and finally it will deliver a professional report detailing the information above for any interested parties.
Summary of Compliance Laws and Regulations: 1. FISMA: I. FISMA is the Federal Information Security Management act developed to ensure that federal agencies protect their data. II. To be compliant with FISMA we must Develop an agency wide program to provide information security and have annual inspections to determine the effectiveness of our program. 2. COBIT: I. Control Objectives for Information and Related Technology, contains good practices for IT management provided by ISACA. Provides a extensive framework for ensuring your IT is being used to support your organization in the best possible manner.
Key Responsible individuals: A. IT manager –planning, budgeting, performance of information systems security. B. Senior Management- Organizational risk as a whole, funding for project. C. Risk Manager – Development and