Assignment: Risk Management
1. The phases of a risk assessment are presented in the textbook and the Octave Allegro Methodology. List the phases for each methodology and then compare and contrast these phases.
1. What factors are involved in determining the price for a security risk assessment?
2. Describe the three assessment methods used by assessors. When is it appropriate to use each method?
3. What are the various audiences for a security risk assessment report? What challenges are there in writing a report for these audiences? How can the challenges be overcome?
4. If you hired a firm to do a risk assessment of your business, would you hire the same firm to mitigate any risks that were identified? Why or why not?
5. Why is it necessary to establish boundaries for a risk assessment? Describe several different boundaries that might be established and why each of those boundaries would be established.
6. When performing an Octave Allegro risk assessment, what type of information assets should be considered in the assessment? What are some of the challenges in identifying those assets?
Format your assignment according to the following formatting requirements:
1. The answer should be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides.
2. The response also include a cover page containing the title of the assignment, the student's name, the course title, and the date. The cover page is not included in the required page length.
3. Also Include a reference page. The Citations and references should follow APA format. The reference page is not included in the required page length.
Article: Introducing OCTAVE Allegro: Improving the Information Security Risk Assessment Process by Richard A. Caralli, James F. Stevens. Lisa R. Young and William R. Wilson.
Chapter 2: Information Security Risk Assessment Basics.