1. In which step the risk management process do you find, recognize, and describe risks?

2. What is the exercise called when you are trying to gauge how significant a risk is?

3. What practice helps address a risk?

4. What ongoing practice helps track risk in real time?

5. True or False: Once an organization completes all risk management steps, from planningthrough monitoring, the task is done.

6. Given that an IT risk management plan can be large in scope, why is it a good idea to develop arisk management plan team?

7. In the seven domains of a typical IT infrastructure, the User domain is typically the mostdifficult to plan, identify, assess, treat, and monitor. Why?

8. One of the ways you manage risk is to simply avoid a risky activity. The lab includes a table ofidentified risks, threats, and vulnerabilities in a healthcare setting. Identify a risk, threat, orvulnerability for which you could avoid the risk. Explain your answer.

9. The lab includes a table of identified risks, threats, and vulnerabilities in a healthcare setting. What wouldbe needed to address those risks, threats, and vulnerabilities in the “Risk Response” section of an IT riskmanagement plan?

10. You can share or transfer risk by shifting responsibility to another party. Risk transfer shifts theentire responsibility or liability; risk sharing shifts a portion of the responsibility or liability.Organizations can outsource part or all of the activity. Identify a risk, threat, or vulnerability from thetable in this lab for which you could share or transfer the risk. Explain your answer.

11. For risk monitoring, what are some techniques or tools you can implement in each of the seven domains ofa typical IT infrastructure to help mitigate risk?

12. For risk mitigation, what processes and procedures can help streamline and implement riskmitigation solutions to the production IT infrastructure?

13. What is the purpose of a risk register?

14. How does risk response impact change control management and vulnerability management?

15. Define what is risk planning?

Note:

APA Format required

No Plagarism

Reference text book

Gibson, D. (2015). Managing Risk in Information Systems; Second Edition. Jones and Bartlett Learning.