Q$\mathrm{.}1\mathrm{.}4)$ Derive the Capability Maturity Model $($CMM$)$ for the above case study? $(15)$

Q$\mathrm{.}1\mathrm{.}5)$ Distinguish between the risk treatment criteria can best be applied to strengthen Information Risk Management in the above case study? $(20)$

Q$\mathrm{.}1\mathrm{.}6)$ Apply the three layers of involvement within the governance of the risk management programme in the above case study? $(15)$

Q$\mathrm{.}1\mathrm{.}7)$ Based on the case study above, Justify the risk identification process to assist with proper management of information risks? $(10)$

Q$\mathrm{.}1\mathrm{.}8)$ How should the risk manager in the above case study describe the $$knock$-$on effect$$ to the organization? $(15)$

Q$\mathrm{.}1\mathrm{.}4)$ Derive the Capability Maturity Model $($CMM$)$ for the above case study? $(15)$

Q$\mathrm{.}1\mathrm{.}5)$ Distinguish between the risk treatment criteria can best be applied to strengthen Information Risk Management in the above case study? $(20)$

Q$\mathrm{.}1\mathrm{.}6)$ Apply the three layers of involvement within the governance of the risk management programme in the above case study? $(15)$

Q$\mathrm{.}1\mathrm{.}7)$ Based on the case study above, Justify the risk identification process to assist with proper management of information risks? $(10)$

Q$\mathrm{.}1\mathrm{.}8)$ How should the risk manager in the above case study describe the $$knock$-$on effect$$ to the organization? $(15)$