Subject Code: BIT361
Subject Name: Security Management and Governance
Assignment Part B
Final Risk Assessment/Management Document
Prepared for the Management of Denisovan
Prepared By:
Student No.
Word Count : 300
Subject Code – Subject Name
Individual Assignment No. XX
Page 2 of 16
Executive Summary
Not Required for this assignment
Subject Code – Subject Name
Individual Assignment No. XX
Page 3 of 16
TABLE OF CONTENTS
Internal Heading ………………………………………………………………………………………………… 4
Document Content …………………………………………………………………………………………. 4
Introduction ………………………………………………………………………………………………… 4
A discussion of why policies are needed (5) ……………………………………………………. 9
A discussion of what policy documents should look like. (5) ………………………………. 9
A discussion of the types of policies needed for information security. (10) ……………. 9
Benefits and purpose of a risk assessment plan. (5) …………………………………………. 9
Description of risk assessment process (10) ……………………………………………………. 9
Outline the steps for creating a risk management plan (10) ……………………………….. 9
Perform a simple risk assessment ……………………………………………………………………. 9
Identification of Assets (5) …………………………………………………………………………….. 9
Asset priority determined using Table 1. (5) …………………………………………………….. 9
Identification of threats/vulnerabilities using TVA table. (10) …………………………….. 11
Priorities set (Table 3). (10) …………………………..……………………………………………. 12
Suggested controls (5) ……………………………………………………………………………….. 12
Conclusion………………………………………………………………………………………………….. 13
References ……………………………………………………………………………………………………… 14
Appendix ………………………………………………………………………………………………………… 15
Announcment of Originality.
The Author of this work, whos name appears on the title page attest to the originality of all
work contained, whereas any sources or references have been used they will appear under
the references section
Subject Code – Subject Name
Individual Assignment No. XX
Page 4 of 16
Internal Heading
Document Content
Introduction
Denisovan Medical Supplies is a maker of compound items for use in the creation of
pharmacological drugs. This incorporates dormant powders utilized in pill creation, fluid
solvents for meds that should be conveyed either by mouth or intravenously, just as
particular synthetic compounds expected to deliver different prescriptions. Denisovan
likewise has an exploration arm that creates strategies for delivering these items. This
examination prompts the enlistment of a few licenses every year or improvement in their
creation measures.
A. Policies give direction, consistency, responsibility, effectiveness, and lucidity on
how an association works
• Direction
Policies characterize the objectives of an association and give direction concerning how to
accomplish targets.
• Consistency
Set up policies and methods guarantee the association’s cycles don‘t go amiss or weaken
over the long haul, regardless of whether console individuals, project workers, or
representatives leave.
• Responsibility
At the point when policies and methodology are grounded and reliably followed, an
association can disprove charges of injustice or lawful infringement that occupants might
record against it.
B.
Component
Example ( hypothetical)
An assertion of what the association tries
to accomplish for its clients
The going with course of action intends to
ensure that XYZ Association Inc. fulfills the
suspicion for its people for quality
organizations in game and delight
movement.
Supporting standards, values, and
philosophies
The supporting guideline of this
methodology is that the game plan of
significant worth organizations is totally
basic in building enrolment and interest.
Satisfied people will undoubtedly continue
with collaboration, add to the affiliation and
restore the interests each year.
Expansive help destinations that clarify the
regions wherein the association will be
dealing
This game plan means to deal with the idea
of organizations gave XYZ Assoc. Inc.:
The affiliation and the chiefs of activities
and organizations
The organization of alliance resources
Subject Code – Subject Name
Individual Assignment No. XX
Strategies to accomplish each objective
Procedures to chip away at the idea of
organizations in program and event the
board include:
Course of action of getting ready for event
specialists
Executing a part outline
Developing a culture of consistent
improvement
Systems to chip away at the idea of
organizations through the better
organization of resources through:
Execution of best work on gathering and
orchestrating measures
Capable improvement openings for the HR
of the affiliation
Arranging a peril the board program
The help of records and informational
indexes to help the organization
collaboration.
C. Types of security:
1. Acceptable Use Policy (AUP)
