Week 8 Assignment: Course Project: Final IT Risk Management Plan [u08a1] Week 8 Assignment: Course Project: Final IT Risk Management Plan Due: Sun Mar 2, 2025 11:59pm

Assignment Overview

As you progressed through the course, you used the IT Risk Management Plan Template [cf_IT_risk_management_plan_template.docx] that includes an outline for a risk mitigation plan. You have chosen an organization for your plan, and in Week 2 you wrote the plan objectives, plan scope, and roles and responsibilities for your IT Risk Management Plan. You have also incorporated results from your lab assignments in Weeks 3, 4, 6, and 7. Now, in Week 8, you will make sure you have compiled all of these elements into a single, cohesive document.

Assignment Instructions

1. Compile all of the required elements created in previous weeks into a single, cohesive document. Make sure you label each section with an appropriate heading.
2. If you are using the scenario in the labs use “Health Care Institution” as the Project Name, and if you are using another organization provide the project name of your choice.
3. Include the plan objectives, plan scope, and roles and responsibilities for your IT Risk Management Plan that you wrote for Week 2.
4. Incorporate the following into your final IT Risk Management Plan:
   • Assignment 2: Course Project: Draft IT Risk Management Plan.
   • Assignment 3: Defining the Scope and Structure for an IT Risk Management Plan.
   • Assignment 4: Performing a Qualitative Risk Assessment for an IT Infrastructure.
   • Assignment 7: Developing a Risk Mitigation Plan Outline for an IT Infrastructure.
5. Add a summary at the end of the IT Risk Management Plan
6. Provide a list of references at the end of the paper.

Assignment Criteria

Your assignment must meet these criteria. Please refer to the rubric for this assignment.

• Write objectives for an IT risk management plan.
• Write a scope statement for an IT risk management plan.
• Write the roles and responsibilities for an IT risk management plan.
• Develop tables that map risks, threats, and vulnerabilities with potential countermeasures and countermeasure considerations.
• Develop a risk mitigation plan outline for an IT infrastructure.
• Use style and vocabulary generally appropriate to the message and intended audience.

Assignment Requirements

• IT Risk Management Plan: IT Risk Management Plan draft aligned with the IT Risk Management Plan template. The IT Risk Management Plan is considered a professional document. See the Writing CenterLinks to an external site. for helpful resources.
• Written communication: Written communication is free of errors that detract from the overall message.
• APA formatting: Resources and citations are formatted according to APA style and formatting.
• Font and font size: Times New Roman, 12 point.

Competencies Measured

By successfully completing this assignment, you will demonstrate your proficiency in the following course competencies and rubric criteria:

• Competency 2: Analyze the role that security policy plays in risk identification and mitigation.
• Write objectives for an IT risk management plan.
• Write a scope statement for an IT risk management plan.
• Competency 3: Analyze information technology systems to discover vulnerabilities that introduce risk to the organization.
• Develop tables that map risks, threats, and vulnerabilities with potential countermeasures and countermeasure considerations.
• Competency 4: Apply risk mitigation strategies and actions that reduce risk to organization due to identified information technology systems vulnerabilities.
• Develop a risk mitigation plan outline for an IT infrastructure.
• Competency 5: Analyze the how administrative, technical and physical controls work together to manage risk in an organization.
• Write the roles and responsibilities for an IT risk management plan.
• Competency 6: Communicate effectively to a range of professional and technical audiences.
• Use style and vocabulary generally appropriate to the message and intended audience.

View RubricCourse Project: Final IT Risk Management PlanCourse Project: Final IT Risk Management PlanCriteriaRatingsPtsWrite objectives for an IT risk management plan.36 to >30.6 ptsDISTINGUISHEDWrite objectives for an IT risk management plan that are comprehensive for a given context.30.6 to >25.2 ptsPROFICIENTWrites objectives for an IT risk management plan.25.2 to >0 ptsBASICWrites objectives for an IT risk management plan, but the objectives are poorly written or inaccurate.0 ptsNON_PERFORMANCEDoes not write objectives for an IT risk management plan./ 36 ptsWrite a scope statement for an IT risk management plan.36 to >30.6 ptsDISTINGUISHEDWrites a scope for an IT risk management plan that is concisely written and comprehensive for a given context.30.6 to >25.2 ptsPROFICIENTWrites a scope statement for an IT risk management plan.25.2 to >0 ptsBASICWrites a scope for an IT risk management plan, but the scope is poorly written or inaccurate.0 ptsNON_PERFORMANCEDoes not write a scope statement for an IT risk management plan,/ 36 ptsWrite the roles and responsibilities for an IT risk management plan.36 to >30.6 ptsDISTINGUISHEDWrite the roles and responsibilities for an IT risk management plan that are concisely written and comprehensive for a given context.30.6 to >25.2 ptsPROFICIENTWrites the roles and responsibilities for an IT risk management plan.25.2 to >0 ptsBASICWrites the roles and responsibilities for an IT risk management plan, but the roles are poorly described or incomplete.0 ptsNON_PERFORMANCEDoes not write the roles and responsibilities for an IT risk management plan./ 36 ptsDevelop tables that map risks, threats, and vulnerabilities with potential countermeasures and countermeasure considerations.36 to >30.6 ptsDISTINGUISHEDDevelops tables that map risks, threats, and vulnerabilities with potential countermeasures and countermeasure considerations specific to a given context.30.6 to >25.2 ptsPROFICIENTDevelops tables that map risks, threats, and vulnerabilities with potential countermeasures and countermeasure considerations.25.2 to >0 ptsBASICDevelops tables that map some of the risks, threats, and vulnerabilities with potential countermeasures and countermeasure considerations.0 ptsNON_PERFORMANCEDoes not develop tables that map risks, threats, and vulnerabilities with potential countermeasures and countermeasure considerations./ 36 ptsDevelop a risk mitigation plan outline for an IT infrastructure.36 to >30.6 ptsDISTINGUISHEDDevelops a risk mitigation plan outline for an IT infrastructure with specific details for a given context.30.6 to >25.2 ptsPROFICIENTDevelops a risk mitigation plan outline for an IT infrastructure.25.2 to >0 ptsBASICDevelops a risk mitigation plan outline for an IT infrastructure, but the outline is missing key elements.0 ptsNON_PERFORMANCEDoes not develop a risk mitigation plan outline for an IT infrastructure./ 36 ptsUse style and vocabulary generally appropriate to the message and intended audience.20 to >17 ptsDISTINGUISHEDUses style and vocabulary fully appropriate to the message and intended audience.17 to >14 ptsPROFICIENTUses style and vocabulary generally appropriate to the message and intended audience.14 to >0 ptsBASICUses style and vocabulary somewhat appropriate to the message and intended audience.0 ptsNON_PERFORMANCEDoes not use style and vocabulary appropriate to the message and intended audience./ 20 ptsTotal Points: 0