QUESTION $1[100$ MARKS$]$

$1\mathrm{.}1$ In the wake of this event, the executive management of Microsoft has requested you to submit a report in

which you critically discuss the significance of risk protocols in managing risks.

Your response should address the primary issues that are provided for in this document. Make use of context

specific examples.

$(20$

Marks$)$

$1\mathrm{.}2$ The head of risk management at Microsoft has asked the executive team to consider the level of risk the

organization should be prepared to absorb and withstand at any given time.

As an experienced risk practitioner, advise the executive team on how to respond to this question and the

factors they need to consider, using relevant examples.

$(20$

Marks$)$

$1\mathrm{.}3$ In the context of the IT sector, explain the concept of risk appetite and illustrate how this can differ between

two organisations operating in the same sector.

Your response should identify the selected organisations and provide for the differences in the risk appetite

using practical components.

$(20$

Marks$)$

$1\mathrm{.}4$ Using the FIRM risk scorecard, demonstrate the strategies that should be adopted by Microsoft in controlling

risks associated with system outages. Make use of relevant examples.

$(20$

Marks$)$

$1\mathrm{.}5$ Using a relevant example, critically discuss why organizations remain exposed to risks impacting their

internal operations despite investing in internal controls. Provide a practical example to support your response.

$(20$

Marks$)$