Harrisburg University of Science and Technology IT Risk Management Plan Lab Report 1. What is the goal or objective of an IT risk management plan? 2. What

Harrisburg University of Science and Technology IT Risk Management Plan Lab Report 1. What is the goal or objective of an IT risk management plan?

2. What are the five fundamental components of an IT risk management plan?

3. Define what risk planning is.

4. In which step the risk management process do you find, recognize, and describe risks?

5. What is the exercise called when you are trying to gauge how significant a risk is?

6. What practice helps address a risk?

7. What ongoing practice helps track risk in real time?

8. True or False: Once an organization completes all risk management steps, from planning

through monitoring, the task is done.

9. Given that an IT risk management plan can be large in scope, why is it a good idea to develop a

risk management plan team?

10. In the seven domains of a typical IT infrastructure, the User domain is typically the most

difficult to plan, identify, assess, treat, and monitor. Why?

11. One of the ways you manage risk is to simply avoid a risky activity. The lab includes a table of

identified risks, threats, and vulnerabilities in a healthcare setting. Identify a risk, threat, or

vulnerability for which you could avoid the risk. Explain your answer.

12. The lab includes a table of identified risks, threats, and vulnerabilities in a healthcare setting. What would

be needed to address those risks, threats, and vulnerabilities in the “Risk Response” section of an IT risk

management plan?

13. You can share or transfer risk by shifting responsibility to another party. Risk transfer shifts the

entire responsibility or liability; risk sharing shifts a portion of the responsibility or liability.

Organizations can outsource part or all of the activity. Identify a risk, threat, or vulnerability from the

table in this lab for which you could share or transfer the risk. Explain your answer.

14. For risk monitoring, what are some techniques or tools you can implement in each of the seven domains of

a typical IT infrastructure to help mitigate risk?

15. For risk mitigation, what processes and procedures can help streamline and implement riskmitigation

solutions to the production IT infrastructure?

16. What is the purpose of a risk register?

17. How does risk response impact change control management and vulnerability management?