Project $13\mathrm{.}3$: Assessing Risk Management

According to the FFIEC Information Security InfoBase Handbook, the initial step in a regulatory Information Technology Examination is to interview management and review examination information to identify changes to the technology infrastructure, new products and services, or organizational structure. Type each answer.

$1.$ Explain how changes in network topology, system configuration, or business processes might increase the institution$$s information security$$related risk. Provide examples.

$2.$ Explain how new products or services delivered to either internal or external users might increase the institution$$s information security$$related risk. Provide examples.

$3.$ Explain how loss or addition of key personnel, key management changes, or internal reorganizations might increase the institution$$s information security$$related risk. Provide examples.