Prepare a 3- to 5-page paper(double spaced) that identifies the possible risks to an organization in each of the following outsourcing situations: a) the use of an external service provider for your data storage; b) the use of an enterprise service provider for processing information systems applications such as a payroll, human resources, or sales order taking; c) the use of a vendor to support your desktop computers; and d) the use of a vendor to provide network support. The paper will include a risk mitigation strategy for each situation. One mitigation strategy, because of personnel and facility limitations, cannot be proposed in the paper, because it eliminates the outsourcing by bringing the situation in house.

Based on the Barr (2011) article, what changes would you recommend for the Information Security Forum’s 2007 Standard? Which of these changes must be incorporated into the enterprise’s risk management plan?Barr 2011 article.pdf 

Term Paper: Disaster Recovery PlanDue Week 10 and worth 200 pointsThis assignment consists of two (2) parts: a written paper and a PowerPoint presentation. You must submit both parts as separate files for the completion of this assignment. Label each file name according to the section of the assignment it is written for. Additionally, you may create and / or assume all necessary assumptions needed for the completion of this assignment.In recent years, organizations have witnessed the impact of having effective and non-effective business continuity plans and disaster recovery plans.  In today’s environment, with significant potential natural disasters, terrorist threats, and other man-made threats, it is critical that organizations develop effective business continuity plans and disaster recovery plans. Select an organization that you are familiar with, such as where you currently or previously have worked, contact a local organization, or search on the Internet for the needed detail of an organization you are interested in. Prepare a disaster recovery plan policy for that organization.Part 1: Written Paper1.1.Write a six to eight (6-8) page paper in which you:a. Provide an overview of the organization that will be delivered to senior management, defining the business goals and objectives and the size, layout, and structure of the organization.b. Include a diagram of the organization’s network architecture and the proposed network architecture of an alternate computing facility in the event of a disaster (or the actual network architecture of the alternate computing facility if one already exists) through the use of graphical tools in Microsoft Word or Visio, or an open source alternative such as Dia. Note: The graphically depicted solution is not included in the required page length.c. Develop the DRP Policy, including:i. Disaster declarationii. Assessment of securityiii. Potential disaster scenarios and methods of dealing with the disasteriv. Disaster recovery proceduresd. Develop an Incident Response Team (IRT) charter, which includes the following sections:i. Executive summaryii. Mission statementiii. Incident declarationiv. Organizational structurev. Roles and responsibilitiesvi. Information flow and methods of communicationvii. Methods and services provided by the IRTviii. Authority and reporting proceduresYour assignment must follow these formatting requirements:Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.Include charts or diagrams created in MS Visio or Dia as an appendix of the infrastructure document. All references to these diagrams must be included in the body of the infrastructure document.Part 2: PowerPoint PresentationUse Microsoft PowerPoint to:2. Create a twelve to fourteen (12-14) slide presentation that will be presented to the agency’s management, in which you:a. Summarize the elements of the DRP Policy and IRT Charter, covering the main elements from Steps 3 and 4 above. b. Include an introduction and conclusion slide.The specific course learning outcomes associated with this assignment are:Describe the different ISS policies associated with risk management.Compare and contrast the different ISS policies associated with incident response teams (IRT).Use technology and information resources to research issues in security strategy and policy formation.Write clearly and concisely about Information Systems Security Policy topics using proper writing mechanics and technical style conventions.