Ronald Horne IS3110 5/10/2015
Before agreeing to the contract I would like to outline some risks that goes with this current project. I will address the concerns by showing you the qualitative and the quantitative risks
Quantitative Risk Assessment Overview. The penalty of $100,000.00 per month after the 9 month deadline is my first risk. If the project is two months behind schedule it will cost us over $200,000.00 if we are to include the cost of labor. After month 3 we are looking at $300,000.00 which could really eat into our profits. If the contract is canceled than we lose the chance of getting future jobs with the government and run the risk of future income. The new network storage and security devices that need to be installed is my second risk. If there is no power, room or personnel to support the hardware we could be looking at thousands of dollars lost. First is the room, if there is not enough rack space or even room to put the rack than we are looking at incurring construction costs and labor costs as well. Not having power means that we will not be able to have the equipment up and running in time to meet the deadline. Support personnel is imperative because if the equipment is not functioning we could lose the possibility of losing future income.
Qualitative Risk Assessments Overview. The company complying with FISMA entails some risk as well for our company. The risk that we might encounter is impact on the company if we fall out of compliance. Unauthorized access, use, disclosure, modification or destruction of information. If we write proper policy and procedures for this project we should reduce the risks and make sure the information security is addressed throughout the life cycle of our contract. Being compliant will reduce risk but we always have to train the right personnel