04 Oct Create a draft of the risk assessment (RA) plan

Instructions

The purpose of this assignment is to allow you to create a draft risk assessment plan. The draft is an outline.

Scenario

You are an information technology (IT) intern working for Orange Beach Sports, Inc. (OBS), a fictitious health services organization headquartered in Orange Beach, Alabama. OBS has over 200 employees throughout the organization and generates $100 million USD in annual revenue. These numbers have been growing significantly on an annual basis. The company has two additional locations in Phoenix, Arizona, and Arlington, Virginia, in which all products are stored and shipped. The headquarters is located near a co-location data center, which houses production systems and is managed by a third-party data center hosting vendor. The organization does not have a business continuity plan, but this is needed because of its growth and multiple locations.

Company products:

OBS has two main product lines: Winter Sports Gear and Apparel and Summer Sports Gear and Apparel.

Winter Sports Gear and Apparel includes items such as snow jackets, snowshoes, and ski goggles. This product line generates 60% of the company’s revenue.

Summer Sports Gear and Apparel includes items such as bathing suits, sandals, and sunglasses. This product line generates 40% of the company’s revenue.

The company’s public website site allows consumers to browse products, read reviews, check availability, and place orders that are shipped from the warehouse location that the system selects based on inventory levels, shipment time, and shipment cost.

Information technology infrastructure overview:

The co-located data center in Orange Beach houses the company data center that includes 50 production servers. The warehouse locations do not have a data center. Each of the three locations maintains corporate laptops and company-issued mobile devices.

Threats identified:

Upon review of the current risk management plan, the following threats were identified:

 loss of company data due to lost or stolen company-owned assets, such as mobile devices and laptops;

 loss of customers due to production outages caused by various events, such as natural disasters, change management, and unstable software;

 internet threats due to company products being accessible on the internet;

 insider threats; and

 changes in regulatory landscape that may impact operations.

Instructions

Create a draft of the risk assessment (RA) plan. Hint: A sample risk assessment outline can be found in Chapter 5 of your textbook. To complete this assignment, you must include the following.

1. Develop an introduction to the plan explaining its purpose and importance.

2. Create an outline for the RA plan.

3. Define the scope and boundaries for the RA plan.

4. Research and summarize RA approaches.

5. Identify the key roles and responsibilities of individuals and departments within the organization as they pertain to risk assessment.

6. Develop a proposed schedule for the RA process.

7. Create a professional report detailing the information above as an initial draft of the RA plan.

Your assignment must be at least two pages in length and must not exceed three pages. You must use at least two sources. One source must be from the CSU Online Library; the other may be your textbook. Your assignment, including in-text citations and references, must be in APA style.