Your Appendix A Risk Register should be in table format using the following column headings:

• Risk
• Impact
• Likelihood
• Assessment
• Controls
• Residual Risk
• Priority

TASK Read the DR Alarms case study document before attempting this assignment. You are an ICT Security and Risk consultant and you have been approached by DR Alarms to help them recover from a cyber attack. You have successfully isolated the machines affected by the attack and brought the company's system back into operation. The company is unsure what damage has been done during the attack and has asked you what can be done to prevent this issue occuring again. You have indicated to the Managing Director (MD) that as a first step, the company needs to be aware of the risks and threats to the company as well as the controls that can be used to mitigate these risks. The DR Alarms MD is not convinced that this is a valid approach as they have never experienced this type of attack before. But, he agrees that you should give him a report on the risks that you foresee. Tasks: 1. Write a report for the MD of DR Alarms that explains why the company needs to understand its risk exposure and how to minimise it. Your report should clearly state the possible consequences to the company if the risks are not addressed. 2. As Appendix A to the report, you are to identify the major risks that DR Alarms is exposed to. This should include: a. A brief description of each risk identified (risks may be grouped together, if they are quite similar and act on the same assets), b. A brief summary of the impact or consequence if the risk was to arise, c. The likelihood of the risk occurring, d. The inherent risk assessment (this is the assessed, raw/untreated risk inherent in a process or activity without doing anything to reduce the likelihood or consequence). e. The key controls proposed to mitigate the risk, f. The residual risk assessment (this is the assessed risk in a process or activity, in terms of likelihood and consequence, after controls are applied to mitigate the risk), g. The priority of the risk