Risk Management Plan

Project Name: IS305 Project Manager: Paul Bettinger Date: October 1, 2013

RISK management PLAN
INTRODUCTION 2
PURPOSE AND SCOPE 2
RISK MANAGEMENT PLANNING 3
RISK MANAGEMENT ASSIGNMENTS 6
RISK MANAGEMENT TIMELINE 7

MITIGATION PLAN
Introduction 8
Cosiderations 8
Prioritizing 9
Cost benefit analysis 10
Implementation 11
Follow-up 11
Buisness impact analysis
Introduction 12
Scope 12
PURPOSE AND objectives 13
Steps of bia 13 final review 15

BUSINESS CONTINUITY PLAN
Introduction 16 oBJECTIVES 16
BCP PLANNING 17
PLAN UPDATES AND TRAINING 21

computer incident response team
Introduction 22
Purpose 22 elements of the plan 23 incident handling process 23 cirt members 23 detection 24 containment 24 recovery and review 24 cirt policies 25

FINAL THOUGHT

RISK MANAGEMENT PLAN

INTRODUCTION
A risk management plan is a process for identifying, assessing, and prioritizing risks that could cause the company a loss. Identifying these risks, threats and vulnerabilities and taking action to prevent or control them now and in the future. Creating a risk management consists of measuring and prioritizing risks involved and taking actions to reduce any loss the company may encounter.
Being that indirectly we work with the Department of Defense, which as you knows is a department of the United States Government dealing with national security, a well-developed risk management plan is of the upmost importance. Without updating our current plan and conforming to newer technologies are company may see unexpected problems and losses in the future.
PURPOSE AND SCOPE
The purpose of the scope is to protect and secure valuable data in the main data servers. This will involve securing data and protecting the network from intrusions both internally and externally. The key points that will need to be addressed are as