In Phase 1, you completed a risk assessment based on the Scenario 1: You are tasked by your supervisor to develop a risk assessment for your organization, Triangle. Triangle is a manufacturer of HVAC components headquartered in Clarksville, TN. This area has a history of flooding, tornadoes, and the occasional severe winter storms. Your supervisor is concerned with these naturally occurring events and would like your risk assessment to address these specifically and include any other risks that you identify.. You will use this information to complete a business impact analysis worksheet. It is important to understand that normally, a subject matter expert of the department would be completing this document, as he or she would have the best insight on the operational and financial impact if a threat or risk were to occur. For example, if you were to conduct this analysis on the human resources (HR) department, the HR manager would be the most likely candidate to complete the worksheet because he or she is in a better position to understand how a risk would impact the department.For this assignment, you will complete the Business Impact Analysis Worksheet.Click here to download the Business Impact Analysis Worksheet (FEMA, 2014).Using the risk assessment you created in Phase 1 and acting as the representative of the information technology department, complete the business impact analysis worksheet. For each risk you identified, you will complete a row on the worksheet that outlines the operational and financial impact.Once you have completed the worksheet, you will provide a narrative of 600–800 words that discusses your thought process on completing the worksheet. Make sure that you cite your sources of information according to the undergraduate writing guide available in the library.

Subject: Operation SecurityProject: Department of Defense (DoD) ReadyScenario:You work for a high-tech company with approximately 390 employees. Your firm recently won a large DoD contract, which will add 30% to the revenue of your organization. It is a high-priority, high-visibility project. You will be allowed to make your own budget, project timeline, and tollgate decisions.This course project will require you to form a team of 2 to 3 coworkers (fellow students) and develop the proper DoD security policies required to meet DoD standards for delivery of technology services to the U.S. Air Force Cyber Security Center (AFCSC), a DoD agency. To do this, you must develop DoD-approved policies and standards for your IT infrastructure (see the “Tasks” section below). The policies you create must pass DoD-based requirements. Currently, your organization does not have any DoD contracts and thus has no DoD-compliant security policies or controls in place.Self-Assessment Checklist:I developed a list of compliance laws required for DoD contracts.I listed controls placed on domains in the IT infrastructure.I listed required standards for all devices, categorized by IT domain.I developed DoD policies and standards for our organization’s IT infrastructure.I developed a deployment plan for implementation of these polices, standards, and controls.I listed all applicable DoD frameworks in the final report.I involved myself in each of the lessons and asked my instructor questions.I found additional references/resources than those provided.I created an academic paper describing the policies, standards, and controls that would make our organization DoD compliant.Requirements:Need minimum 1500 wordsNeed minimum 5 PEER Reviewed APA ReferencesFollow the typical Research paper protocol (Abstract, Literature Review, Recommendations, Conclusion)Need PPT with 8 SlidesNo plagiarism pleaseMaterials Provided to look through:oDoD instructions or directives http://www.dtic.mil/whs/directives/oRisk Management Framework (RF) for Department of Defense Information Technology (IT) http://www.dtic.mil/whs/directives/corres/pdf/8510... and http://www.rmf.org/images/stories/rmf_documents/85...oDepartment of Defense Information Security Program http://www.fas.org/irp/doddir/dod/5200-1r/oDepartment of Defense Internet Services and Internet-Based Capabilities http://www.dtic.mil/whs/directives/corres/pdf/8550...oDepartment of Defense Proposes New Information Security Requirements for Contractors: http://www.hldataprotection.com/2010/03/articles/c...Note: Please check the uploaded document to see the formatted/pretty look requirements. Thanks

Purpose This project provides an opportunity to apply the competencies gained in the lessons of this course to develop a risk management plan for a fictitious organization to replace its outdated plan. Learning Objectives and Outcomes You will gain an overall understanding of risk management, its importance, and critical processes required when developing a formal risk management plan for an organization. Required Source Information and Tools Web References: Links to Web references in this document and related materials are subject to change without prior notice. The following tools and resources that will be needed to complete this project: Course textbook Internet access for research Deliverables As discussed in this course, risk management is an important process for all organizations. This is particularly true in information systems, which provides critical support for organizational missions. The heart of risk management is a formal risk management plan. The project activities described in this document allow you to fulfill the role of an employee participating in the risk management process in a specific business situation. The project is structured as follows: Project Part Deliverable Project Part Risk Management Plan Submission Requirements All project submissions should follow this format: Format: Microsoft Word or compatible Font: Arial, 10-point, double-space Citation Style: Your school’s preferred style guide Scenario You are an information technology (IT) intern working for Health Network, Inc. (Health Network), a fictitious health services organization headquartered in Minneapolis, Minnesota. Health Network has over 600 employees throughout the organization and generates $500 million USD in annual revenue. The company has two additional locations in Portland, Oregon and Arlington, Virginia, which support a mix of corporate operations. Each corporate facility is located near a co-location data center, where production systems are located and managed by third-party data center hosting vendors. Company Products Health Network has three main products: HNetExchange, HNetPay, and HNetConnect. HNetExchange is the primary source of revenue for the company. The service handles secure electronic medical messages that originate from its customers, such as large hospitals, which are then routed to receiving customers such as clinics. HNetPay is a Web portal used by many of the company’s HNetExchange customers to support the management of secure payments and billing. The HNetPay Web portal, hosted at Health Network production sites, accepts various forms of payments and interacts with credit-card processing organizations much like a Web commerce shopping cart. HNetConnect is an online directory that lists doctors, clinics, and other medical facilities to allow Health Network customers to find the right type of care at the right locations. It contains doctors’ personal information, work addresses, medical certifications, and types of services that the doctors and clinics offer. Doctors are given credentials and are able to update the information in their profile. Health Network customers, which are the hospitals and clinics, connect to all three of the company’s products using HTTPS connections. Doctors and potential patients are able to make payments and update their profiles using Internet-accessible HTTPS Web sites. NOTE:Any discussion of products not a part of this scenario, such as health insurance products, will result in an automatic 50% reduction in points. Your paperis not a research paper on risk management – it is a risk management plan to a very specific situation and must relate to the scenario, above. Information Technology Infrastructure Overview Health Network operates in three production data centers that provide high availability across the company’s products. The data centers host about 1,000 production servers, and Health Network maintains 650 corporate laptops and company-issued mobile devices for its employees. Threats Identified Upon review of the current risk management plan, the following threats were identified: Loss of company data due to hardware being removed from production systemsLoss of company information on lost or stolen company-owned assets, such as mobile devices and laptopsLoss of customers due to production outages caused by various events, such as natural disasters, change management, unstable software, and so onInternet threats due to company products being accessible on the InternetInsider threatsChanges in regulatory landscape that may impact operations Management Request Senior management at Health Network has determined that the existing risk management plan for the organization is out of date and a new risk management plan must be developed. Because of the importance of risk management to the organization, senior management is committed to and supportive of the project to develop a new plan. You have been assigned to develop this new plan. Additional threats other than those described previously may be discovered when re-evaluating the current threat landscape during the risk assessment phase. The budget for this project has not been defined due to senior management’s desire to react to any and all material risks that are identified within the new plan. Given the company’s annual revenue, reasonable expectations can be determined. Project Part 1 Project Part 1 Task 1: Risk Management Plan For the first part of the assigned project, you must create an initial draft of the final risk management plan. To do so, you must: You Risk Management Plan will contain the following sections: A section titled Introduction discussing the purpose of the plan. You must include details from the scenario, above, describing the environment.10 points.A section titled Scope discussing the scope of the plan. 10 pointsA section, titled Compliance Laws and Regulations.Using the information in the scenario provided above, discuss regulations and laws with which Health Network must comply. 30 pointsA section, titled Roles and Responsibilities, that will discuss the different individuals and departments who will be responsible for risk management within the organization (this was presented in your textbook). 20 pointsA section, titled Risk Mitigation Plan, that discusses the threats identified in the scenario and your proposed mitigations, as well as any new threats.30 points. Write an initial draft of the risk management plan as detailed in the instructions above. Your plan should be made using a standard word processor format compatible with Microsoft Word. Evaluation Criteria and Rubrics Did the student demonstrate an understanding of the competencies covered in the course thus far? Did the student include all important components of a risk management plan in the outline? Did the student demonstrate good research, reasoning, and decision-making skills in identifying key components and compliance laws and regulations? Did the student create a professional, well-developed draft with proper grammar, spelling, and punctuation? Purpose This project provides an opportunity to apply the competencies gained in the lessons of this course to develop a risk management plan for a fictitious organization to replace its outdated plan. Learning Objectives and Outcomes You will gain an overall understanding of risk management, its importance, and critical processes required when developing a formal risk management plan for an organization. Required Source Information and Tools Web References: Links to Web references in this document and related materials are subject to change without prior notice. The following tools and resources that will be needed to complete this project: Course textbook Internet access for research Deliverables As discussed in this course, risk management is an important process for all organizations. This is particularly true in information systems, which provides critical support for organizational missions. The heart of risk management is a formal risk management plan. The project activities described in this document allow you to fulfill the role of an employee participating in the risk management process in a specific business situation. The project is structured as follows: Project Part Deliverable Project Part Risk Management Plan Submission Requirements All project submissions should follow this format: Format: Microsoft Word or compatible Font: Arial, 10-point, double-space Citation Style: Your school’s preferred style guide Scenario You are an information technology (IT) intern working for Health Network, Inc. (Health Network), a fictitious health services organization headquartered in Minneapolis, Minnesota. Health Network has over 600 employees throughout the organization and generates $500 million USD in annual revenue. The company has two additional locations in Portland, Oregon and Arlington, Virginia, which support a mix of corporate operations. Each corporate facility is located near a co-location data center, where production systems are located and managed by third-party data center hosting vendors. Company Products Health Network has three main products: HNetExchange, HNetPay, and HNetConnect. HNetExchange is the primary source of revenue for the company. The service handles secure electronic medical messages that originate from its customers, such as large hospitals, which are then routed to receiving customers such as clinics. HNetPay is a Web portal used by many of the company’s HNetExchange customers to support the management of secure payments and billing. The HNetPay Web portal, hosted at Health Network production sites, accepts various forms of payments and interacts with credit-card processing organizations much like a Web commerce shopping cart. HNetConnect is an online directory that lists doctors, clinics, and other medical facilities to allow Health Network customers to find the right type of care at the right locations. It contains doctors’ personal information, work addresses, medical certifications, and types of services that the doctors and clinics offer. Doctors are given credentials and are able to update the information in their profile. Health Network customers, which are the hospitals and clinics, connect to all three of the company’s products using HTTPS connections. Doctors and potential patients are able to make payments and update their profiles using Internet-accessible HTTPS Web sites. NOTE:Any discussion of products not a part of this scenario, such as health insurance products, will result in an automatic 50% reduction in points. Your paperis not a research paper on risk management – it is a risk management plan to a very specific situation and must relate to the scenario, above. Information Technology Infrastructure Overview Health Network operates in three production data centers that provide high availability across the company’s products. The data centers host about 1,000 production servers, and Health Network maintains 650 corporate laptops and company-issued mobile devices for its employees. Threats Identified Upon review of the current risk management plan, the following threats were identified: Loss of company data due to hardware being removed from production systemsLoss of company information on lost or stolen company-owned assets, such as mobile devices and laptopsLoss of customers due to production outages caused by various events, such as natural disasters, change management, unstable software, and so onInternet threats due to company products being accessible on the InternetInsider threatsChanges in regulatory landscape that may impact operations Management Request Senior management at Health Network has determined that the existing risk management plan for the organization is out of date and a new risk management plan must be developed. Because of the importance of risk management to the organization, senior management is committed to and supportive of the project to develop a new plan. You have been assigned to develop this new plan. Additional threats other than those described previously may be discovered when re-evaluating the current threat landscape during the risk assessment phase. The budget for this project has not been defined due to senior management’s desire to react to any and all material risks that are identified within the new plan. Given the company’s annual revenue, reasonable expectations can be determined. Project Part 1 Project Part 1 Task 1: Risk Management Plan For the first part of the assigned project, you must create an initial draft of the final risk management plan. To do so, you must: You Risk Management Plan will contain the following sections: A section titled Introduction discussing the purpose of the plan. You must include details from the scenario, above, describing the environment.10 points.A section titled Scope discussing the scope of the plan. 10 pointsA section, titled Compliance Laws and Regulations.Using the information in the scenario provided above, discuss regulations and laws with which Health Network must comply. 30 pointsA section, titled Roles and Responsibilities, that will discuss the different individuals and departments who will be responsible for risk management within the organization (this was presented in your textbook). 20 pointsA section, titled Risk Mitigation Plan, that discusses the threats identified in the scenario and your proposed mitigations, as well as any new threats.30 points. Write an initial draft of the risk management plan as detailed in the instructions above. Your plan should be made using a standard word processor format compatible with Microsoft Word. Evaluation Criteria and Rubrics Did the student demonstrate an understanding of the competencies covered in the course thus far? Did the student include all important components of a risk management plan in the outline? Did the student demonstrate good research, reasoning, and decision-making skills in identifying key components and compliance laws and regulations? Did the student create a professional, well-developed draft with proper grammar, spelling, and punctuation?