Module 1 of Principles of Incident Response and Disaster Recovery includes a det
Module 1 of Principles of Incident Response and Disaster Recovery includes a detailed discussion of risk management and how it applies to information security. Your task here is to select a topic of interest within the realm of risk management, learn more about that topic, and then explain it to your classmates in writing.
First, review the “Overview of Risk Management” sections of Module 1. Identify an element of risk management that is of particular interest to you.
Go to the discussion board in your school’s LMS (learning management system). If there are any posts from your fellow students about elements of risk management, review the posts quickly. Try to avoid topics that have already been selected.
Research your topic of interest on the Internet. The following documents and Web sites can help you get started; you are encouraged to perform targeted Web searches as needed. Note that the NIST Web site cited below, like many sites, has an internal search tool that helps you find documents:
iso27001security.com/html/risk_mgmt.html
“Guide for Conducting Risk Assessments, NIST SP 800-30, Rev. 1,” http://csrc.nist.gov/publications/PubsSPs.html
“Managing Information Security Risk: Organization, Mission, and Information System View,” NIST SP 800-39, https://csrc.nist.gov/publications/sp
After researching the topic, prepare and post a summary of your findings in the LMS, using a minimum of 200 words. Try to make sure that your topic was not chosen by a large number of your classmates.Before writing, organize your thoughts. For example, why is your topic an important part of risk management?
Explain your topic in paragraph format and include any other interesting information as desired.
Use complete sentences and check your grammar and spelling.