- Choose a risk management model (i.e. MSRAM, MRM, CCPM, CMMI, etc.).
- Choose one government agency and one private OR public sector entity. Implement your risk management model for both entities.
- Identify the risks for both entities.
- Analyze the risks for both entities.
- Evaluate the risks for both entities.
- Provide a recommendation and solution for both entities to mitigate risk, threats, and vulnerabilities within the organizations.
- Discuss how security representatives and leadership between both entities should monitor and review your risk management assessment and model plans.
- Compare both organizations and discuss how the risk management model chosen influenced your assessment. Was it successful? What are the limiting factors? What would you do differently?
Sample Solution