Problem
Assume the role of an IT security intern working for Health Network, Inc. (Health Network), a fictitious health services organization headquartered in Minneapolis, Minnesota. You are responsible for creating a risk management plan.
For this part of the project, you will:
A. Outline for a basic risk management plan. This plan will include a qualitative risk assessment, which is addressed later in the project.
B. Introduction to the plan by explaining its purpose and importance.
C. Define the scope and boundaries of the plan.
D. Research and summarize compliance laws and regulations that pertain to the organization. Students should keep track of sources they use for citation purposes.
E. Identify the key roles and responsibilities of individuals and departments within the organization as they pertain to risk management.
F. Develop a proposed schedule for the risk management planning process.
G. Draft risk management plan detailing the information above. The plan should be formatted similar to a professional business report with sources cited using APA format.