Preview

Applying Risk Management

Good Essays
Open Document
Open Document
1067 Words
Grammar
Grammar
Plagiarism
Plagiarism
Writing
Writing
Score
Score
Applying Risk Management
Applying Risk Management CMGT/430

Applying Risk Management

Risk management is an important element in managing information systems. Applying risk management principals to business procedures is essential because it helps organizations design and maintain a safe systems environment to ensure the confidentiality, integrity, and availability of company data. Kudler Fine Foods has expressed an interest in developing an Enterprise Resource Planning (ERP) system. The primary objective is to improve business administration by integrating stores and business systems. Kudler Fine Foods has three stores in California and integrating business functions across all stores would be extremely beneficial. This paper will outline the major factors and benefits by applying risk management principles to ensure a secure and effective system.
Risk Management Principles According to Whitman and Mattord (2010), risk management is a collaborative effort involving Information security, information technology, management, and users. It is important to involve all of these areas to devise a comprehensive and effective risk management strategy. The major principles include identifying risks, quantifying risks, plan for risks, and monitor and manage risks. The first stage is risk identification. This is when the organization 's managers identifies all of its assets and classifies them into meaningful categories in addition to prioritizing them by importance. Assets include various components such as people, processes, data, and all elements of information technology. Gathering information on assets such as the people aspect processes, and data could be challenging because they are not always documented and readily available. The information gathered for people may include position titles, the title of his or her supervisor, security levels, and skills. Information



References: Whitman,M.E., & Mattord, H. J. (2010). Management of information security(3rded.). Boston, MA: Course Technology/Cengage Learning National Institute of Standards and Technology. (2002). Retrieved from http://csrc.nist.gov/publications/nistpubs/800-30/sp800-30.pd

You May Also Find These Documents Helpful

  • Powerful Essays

    Kudler Security Report

    • 8349 Words
    • 34 Pages

    References: Whitman, M., & Mattord, H. (2010). Management of Information Security (3rd ed.). Retrieved from https://ecampus.phoenix.edu/content/eBookLibrary2/content/eReader.aspx?…

    • 8349 Words
    • 34 Pages
    Powerful Essays
  • Powerful Essays

    Isc363 Phase 3

    • 1899 Words
    • 8 Pages

    Gibson, D. (2010). Managing Risk in Information Systems. Sudbury, MA. Jones & Bartlett Learning. ISBN: 978-0-7637-9187-2…

    • 1899 Words
    • 8 Pages
    Powerful Essays
  • Satisfactory Essays

    ISSC363 Assignment 3

    • 586 Words
    • 2 Pages

    At its core, the purpose of a risk assessment is identifying and evaluating risks that may potentially have a negative impact on an organization. It can help management understand the impact in terms of costs to the organization or the severity of a loss depending on the methodology used to conduct the risk assessment. The goal is to provide sound recommendations based on the risk assessment to help maintain data confidentiality, integrity and vulnerability while ensuring functionality and usability. Based on the results, management can make more informed decisions about what resources to protect, how to protect them and understand the potential costs and impact. Once the purpose of the risk assessment is understood, defining the scope is next.…

    • 586 Words
    • 2 Pages
    Satisfactory Essays
  • Better Essays

    Whitman, M. E., & Mattord, H. J. (2010). Management of information security (3rd ed.). Boston, MA: Course Technology.…

    • 1432 Words
    • 5 Pages
    Better Essays
  • Good Essays

    Risk Management

    • 786 Words
    • 4 Pages

    Pizza rush is a large take-away company in Australia with a total of to take-away stores scattered in all major cities nationwide…

    • 786 Words
    • 4 Pages
    Good Essays
  • Good Essays

    Risk Management

    • 622 Words
    • 3 Pages

    The Integrated Distributors Incorporated is a publically traded company that is facing many challenges. The company’s Information technology infrastructure has been ignored and many of its operating locations are running outdated hardware and software, which greatly increases the risk to the network in relations to confidentiality, integrity, and availability. Because of the outdated hardware and software, the company suffered some network compromises through their JV internet site and it led to disclosures of sensitive and strategic information.…

    • 622 Words
    • 3 Pages
    Good Essays
  • Powerful Essays

    Risk Management

    • 2295 Words
    • 10 Pages

    The metrics that best work to measure Xemba Translations performance on this project is project diagnostic metrics. While not all risks of a project can be mitigated, using this objective data based on these metrics will make a huge difference to mitigate risk. Using diagnostic project metrics is like using a thermometer to assess the projects current status. This can help eliminate or mitigate the issue before it becomes unmanageable at the close of the project. This can help avoid the, should have, could have, would have moments that may happen once the project closes and gets reviewed from a retrospective project metric. With the diagnostic project metric when an issue does arise a contingency plan can be created if there is a trend toward a major risk as well. Diagnostic project metrics use current project statistics to gage where the project stands throughout the work of the project. This allows the project manager the ability to make better decisions along the route of the project to mitigate risk. Metrics that help improve the decision making, help aid to lower the risk of any project. Diagnostic metrics are comparative measures. The metrics compare a baseline (usually set at time of planning the project) to current project actuals. The actuals are compared to an earned value figure that is determined by where the project should be at that exact moment in time according to the project schedule. These diagnostic metrics will use the actual cost, earned value, and planned value to evaluate schedule variance, schedule performance, cost performance, and cost variance. Schedule performance and schedule variance will evaluate the earned value against the planned value. This will help show if the project is currently on schedule, or if not is it over or under schedule and by how much. Cost variance and cost schedule will reveal how the project is performing compared to the current cost and planned budget. These values will help the project manager assess if the…

    • 2295 Words
    • 10 Pages
    Powerful Essays
  • Better Essays

    Whitman, M. E., & Mattord, H. J. (2010). Management of Information Security (3rd ed.). Boston: Course Technology-Cengage.…

    • 939 Words
    • 4 Pages
    Better Essays
  • Better Essays

    Cmgt400 Week 3

    • 1752 Words
    • 8 Pages

    Whitman, M., & Mattord, H. (2010). Management of Information Security (third ed.). Pittsburgh, PA: Cengage Learning.…

    • 1752 Words
    • 8 Pages
    Better Essays
  • Satisfactory Essays

    Risk Management

    • 607 Words
    • 3 Pages

    The candidate does not develop a social responsibility strategy for the chosen client that includes an environmental considerations and recommendations component.…

    • 607 Words
    • 3 Pages
    Satisfactory Essays
  • Better Essays

    Risk Management

    • 2368 Words
    • 10 Pages

    The reason of using Risk Assessment is to analyze hidden risks that could force a clash with the operation of the business of McBride Financial Services. This will analyze the plan of attack that will help to implemented for to avoid the risks and to minimize the risks that are inescapable.…

    • 2368 Words
    • 10 Pages
    Better Essays
  • Powerful Essays

    Risk Management

    • 1604 Words
    • 7 Pages

    According to the Risk Management section of Wells Fargo’s 2011 Annual Report, to be successful they manage and control three major business risks: credit, asset/liability, and market risk. As for this paper, I’m only going to discuss about their credit and interest rate risk, which is managed under their asset/liability section. Wells Fargo has continued to invest in its risk infrastructure especially since it is a larger and more complex company than before it merged with Wachovia. Wells Fargo’s Senior Executive Vice President and Chief Risk Officer, Michael Loughlin states that they have three lines of defense for managing the risks:…

    • 1604 Words
    • 7 Pages
    Powerful Essays
  • Satisfactory Essays

    Health and Social Care

    • 1306 Words
    • 6 Pages

    1.4. Risk management is about identifying risks and finding the most suitable way of making them as safe as possible for the individual to manage so that they can be as independent as possible.…

    • 1306 Words
    • 6 Pages
    Satisfactory Essays
  • Good Essays

    manage risk

    • 1279 Words
    • 6 Pages

    1. A) Likelihood: Once risks are identified, the next step is to determine the likelihood that the potential vulnerability can be exploited. Several factors need to be considered when determining this likelihood. First, the auditor needs to consider the source of the threat, the motivation behind the threat, and the capability of the source. Next, auditors need to determine the nature of the vulnerability and, finally, the existence and effectiveness of current controls to deter or mitigate the vulnerability. The likelihood that a potential vulnerability could be exploited can be described as high, medium, or low.…

    • 1279 Words
    • 6 Pages
    Good Essays
  • Better Essays

    Risk Management

    • 1271 Words
    • 6 Pages

    As risk manger it is brought to your attention that a Nurse Green in the OR is upset with her rotation schedule and what she feels is slander against her professional abilities. The OR supervisor when asked indicated Ms. Green, had complained to her that a physician, Dr. Ray, had made several passes at her, made suggestive remarks to her and asked her to go out with him repeatedly. Nurse Green indicated she had told him no but he still persisted. She is upset because the new rotation schedule is out for the OR and she was removed from the type of surgery she specializes in which includes all of Dr. Ray’s cases. When she asked why she was told the physician requested she not be in his rotation until she gained more experience. The nurse is upset and indicated she never had a problem with any of the surgeons prior to this and requests a meeting with the supervisor and risk manager/Human resource director.…

    • 1271 Words
    • 6 Pages
    Better Essays

Related Topics