Risk Management Plan Project Part $2$: Risk Assessment Plan

You have a class project titled $$Project: Risk Management Plan$$ in this course. Students will assume the role of an IT security intern working for Health Network, Inc. $($Health Network$),$ a fictitious health services organization headquartered in Minneapolis, Minnesota.

The students will perform research and work on a risk management plan that includes a risk assessment plan, a risk mitigation plan, a business impact analysis, and a business continuity plan. Students will work on those items throughout the course, submitting interim work for grading. A final comprehensive plan is due near the end of the course.

This week, you have to work on Part $2$ of this project. Please keep adding to the same document for every portion of this project.

Part $2$: $(20$ points$)$

The students are responsible for creating a risk assessment plan.

For this part of the project, you will:

$1.$ Research risk assessment approaches.

$2.$ Create an outline for a basic qualitative risk assessment plan.

$3.$ Write an introduction to the plan explaining its purpose and importance.

$4.$ Define the scope and boundaries for the risk assessment.

$5.$ Identify data center assets and activities to be assessed.

$6.$ Identify relevant threats and vulnerabilities. Include those listed in the scenario and add them to the list if needed.

$7.$ Identify relevant types of controls to be assessed.

$8.$ Identify the key roles and responsibilities of individuals and departments within the organization as they pertain to risk assessments.

$9.$ Develop a proposed schedule for the risk assessment process.

$10.$ Complete the draft risk assessment plan detailing the information above.

Requirements: