Information risk management

  

Queation1: Organize the qualitative risk assessment data according to the following: 
? Review the executive summary from the Performing a Qualitative Risk Assessment for an IT Infrastructure lab in this lab manual. 
? Organize all of the critical “1” risks, threats, and vulnerabilities identified throughout the seven domains of a typical IT infrastructure.
Question 02:Describe the purpose of prioritizing the risks prior to creating a risk-mitigation plan.
Question 03Describe the elements of an IT risk-mitigation plan outline by covering the following major topics: 
? Executive summary 
? Prioritization of identified risks, threats, and vulnerabilities organized into the seven domains
? Critical “1” risks, threats, and vulnerabilities identified throughout the IT infrastructure 
? Short-term remediation steps for critical “1” risks, threats, and vulnerabilities 
? Long-term remediation steps for major “2” and minor “3” risks, threats, and vulnerabilities 
? Ongoing IT risk-mitigation steps for the seven domains of a typical IT infrastructure
? Cost magnitude estimates for work effort and security solutions 
? Implementation plans for remediation

 
Question 04Create a detailed IT risk-mitigation plan outline by inserting appropriate subtopics and sub-bullets.