Question

In reference to risk managment strategies, how do you identify and analyze risk mitigation security controls. identify critical success factors (CSFs) and purpose of BIA

Answer 1

The Risk management in a newly computerized environment & that in an ongoing operation will have to be viewed differently. In an ongoing operation, risk management itself cannot be done without evidence

Collection & evidence of risks. Where organization desires to implement a new system, careful Thought needs to be given to see how potential risks can be managed. Security and risk management policies

May be developed s system expands and greater evidence of actual threats begins to become available

The risk identification the function should not be left to chance but should be explicitly covered in a number of project documents:

• Work breakdown structure
• Statement of work,
• , Schedule,
• Budget,