Posted: January 4th, 2023

Cyber security risk profile

Question description

For this paper, you will construct a cybersecurity risk profile for the company that you wrote about in Part 1 of the Corporate Profile projectIf there are images in this attachment, they will not be displayed.Corporate Profile Part 2: Cybersecurity Risk ProfileFor this paper, you will construct a cybersecurityrisk profile for thecompany that you wrote about in Part 1 of the Corporate Profile project.Your risk profile, which includes an Executive Summary, Risk Register, andRisk Mitigation Recommendations (Approach & Security Controls by family),will be developed from information provided by the company in its Form 10-Kfiling (Annual Report to Investors) retrieved from the U.S. Securities andExchange Commission (SEC) Edgar database. You will also need to doadditional research to identify security controls, products, and serviceswhich could be included in the company’s risk response (actions it willtake to manage cybersecurity related risk).Research1. Review the Risk section of the company’s SEC Form 10-K. Develop alist of 5 or more specific cyberspace or cybersecurity related riskswhich the company included in its report to investors. Your list shouldinclude the source(s) of the risks and the potential impacts as identifiedby the company.2. For each risk, identify the risk management or mitigation strategieswhich the company has implemented or plans to implement.3. Next, use the control families listed in the NIST Special Publication800-53http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdftoidentify general categories of controls which could be used or added to thecompany’s risk management strategy for each risk in your list.4. For each control family, develop a description of how the companyshould implement these controls (“implementation approach”) as part ofits risk management strategy.Write1. Develop a 2 to 3 pageExecutive Summaryfrom your Corporate ProfilePart 1 (reuse and/or improve upon the business profile). Your ExecutiveSummary should provide an overview of the company, summarize itsbusiness operations, and discuss the sources, potential impacts, andmitigation approach/strategy for cybersecurity related risks identifiedin the company’s annual report.The Executive Summary should appear atthe beginning of your submission file.2. Copy the Risk Register &Security Control Recommendations table (seetemplate at the end of this assignment) to the end of the file that containsyour Executive Summary.3. Using the information you collected during your research, completethe table. Make sure that you include a name and description for eachrisk. For the security controls, make sure that you include the family nameand a description of how each recommended control should be implemented(implementation approach). Include the control family only. Do notinclude individual security controls from NIST SP 800-53.YourRisk Profile is to be prepared using basic APA formatting (includingtitle page and reference list) and submitted as an MS Word attachment tothe Corporate Profile Part 2 entry in your assignments folder. See thesample paper and paper template provided in Course Resources > APAResources for formatting examples.Consult the grading rubric for specificcontent and formatting requirements for this assignment.Table 1.Risk Register &Risk Mitigation Approach with Recommended SecurityControlsRisk IdentifierDescription of the Risk &Current Risk Management StrategyRisk Mitigation Approach withRecommended Security Controls (by NIST SP 800-53 family)Sequence # or Brief title (<50 characters)Must be from Form 10-K. Split complex risk statements into multipleindividual risks.Must list NIST Control Family (two characterEXAMPLE

Tags: Ace-myhomework Assignment, Affordable College Homework, APA Citation Assignment Help, Custom Essay Writing