Purpose

This project provides an opportunity to apply the competencies gained in the lessons of this course to develop a risk management plan for a fictitious organization to replace its outdated plan.

Learning Objectives and Outcomes

You will gain an overall understanding of risk management, its importance, and critical processes required when developing a formal risk management plan for an organization.

Required Source Information and Tools

Web References: Links to Web references in this document and related materials are subject to change without prior notice. These links were last verified on April 19, 2015.

 

The following tools and resources that will be needed to complete this project:

  • Course textbook
  • Internet access for research

Deliverables

As discussed in this course, risk management is an important process for all organizations. This is particularly true in information systems, which provides critical support for organizational missions. The heart of risk management is a formal risk management plan. The project activities described in this document allow you to fulfill the role of an employee participating in the risk management process in a specific business situation.

The project is structured as follows:

Project Part Deliverable
Project Part 1 Task 1: Risk Management Plan – Due 2/19
   

Submission Requirements

All project submissions should follow this format:

  • Format: Microsoft Word or compatible
  • Font: Arial, 10-point, double-space
  • Citation Style: Your school’s preferred style guide

Scenario

You are an information technology (IT) intern working for Health Network, Inc. (Health Network), a fictitious health services organization headquartered in Minneapolis, Minnesota. Health Network has over 600 employees throughout the organization and generates $500 million USD in annual revenue. The company has two additional locations in Portland, Oregon and Arlington, Virginia, which support a mix of corporate operations. Each corporate facility is located near a co-location data center, where production systems are located and managed by third-party data center hosting vendors.

Company Products

Health Network has three main products: HNetExchange, HNetPay, and HNetConnect.

HNetExchange is the primary source of revenue for the company. The service handles secure electronic medical messages that originate from its customers, such as large hospitals, which are then routed to receiving customers such as clinics.

HNetPay is a Web portal used by many of the company’s HNetExchange customers to support the management of secure payments and billing. The HNetPay Web portal, hosted at Health Network production sites, accepts various forms of payments and interacts with credit-card processing organizations much like a Web commerce shopping cart.

HNetConnect is an online directory that lists doctors, clinics, and other medical facilities to allow Health Network customers to find the right type of care at the right locations. It contains doctors’ personal information, work addresses, medical certifications, and types of services that the doctors and clinics offer. Doctors are given credentials and are able to update the information in their profile. Health Network customers, which are the hospitals and clinics, connect to all three of the company’s products using HTTPS connections. Doctors and potential patients are able to make payments and update their profiles using Internet-accessible HTTPS Web sites.

NOTE:  Any discussion of products not a part of this scenario, such as health insurance products, will result in an automatic 50% reduction in points. Your paper  is not a research paper on risk management – it is a risk management plan to a very specific situation and must relate to the scenario, above.

Information Technology Infrastructure Overview

Health Network operates in three production data centers that provide high availability across the company’s products. The data centers host about 1,000 production servers, and Health Network maintains 650 corporate laptops and company-issued mobile devices for its employees.

Threats Identified

Upon review of the current risk management plan, the following threats were identified:

  • Loss of company data due to hardware being removed from production systems
  • Loss of company information on lost or stolen company-owned assets, such as mobile devices and laptops
  • Loss of customers due to production outages caused by various events, such as natural disasters, change management, unstable software, and so on
  • Internet threats due to company products being accessible on the Internet
  • Insider threats
  • Changes in regulatory landscape that may impact operations

Management Request

Senior management at Health Network has determined that the existing risk management plan for the organization is out of date and a new risk management plan must be developed. Because of the importance of risk management to the organization, senior management is committed to and supportive of the project to develop a new plan. You have been assigned to develop this new plan.

Additional threats other than those described previously may be discovered when re-evaluating the current threat landscape during the risk assessment phase.

The budget for this project has not been defined due to senior management’s desire to react to any and all material risks that are identified within the new plan. Given the company’s annual revenue, reasonable expectations can be determined.


 

Project Part 1

Project Part 1 Task 1: Risk Management Plan

For the first part of the assigned project, you must create an initial draft of the final risk management plan. To do so, you must:

You Risk Management Plan will contain the following sections:

  1. A section titled Introduction discussing the purpose of the plan. You must include details from the scenario, above, describing the environment.  10 points.
  2. A section titled Scope discussing the scope of the plan. 10 points
  3. A section, titled Compliance Laws and Regulations. Using the information in the scenario provided above, discuss regulations and laws with which Health Network must comply. 30 points
  4. A section, titled Roles and Responsibilities, that will discuss the different individuals and departments who will be responsible for risk management within the organization (this was presented in your textbook). 20 points
  5. A section, titled Risk Mitigation Plan, that discusses the threats identified in the scenario and your proposed mitigations, as well as any new threats.30 points.

Write an initial draft of the risk management plan as detailed in the instructions above. Your plan should be made using a standard word processor format compatible with Microsoft Word.

Evaluation Criteria and Rubrics

  • Did the student demonstrate an understanding of the competencies covered in the course thus far?
  • Did the student include all important components of a risk management plan in the outline?
  • Did the student demonstrate good research, reasoning, and decision-making skills in identifying key components and compliance laws and regulations?
  • Did the student create a professional, well-developed draft with proper grammar, spelling, and punctuation?

 

 

 

 

Discuss proposed threat mitigations
Order Now on customessaymasters.com

Testimonials

Subject: Marketing

Thank you very much, Great job! On time delivery! 

Victoria, ~ Sydney, AU.

Subject: Management

Well done, I got an A and I am so happy! Thanks alot! 

J. Williams ~ London, UK

Subject: Sociology

Excellent work and timely delivery! I won't hesitate to order again and I highly recommend. 

Jeniffer ~ New York, USA.

Subject: Nursing

The quality of my research paper was outstanding and the writer was very cooperative.

Rachel, A. ~ Australia

Briefly discuss narrative designs

Please follow the DDBA Rubric uploaded page 44-45 resources must be no older than 2015 APA format 2 paragraphs Draft Study uplaoded Hypothetical Qualitative Example The three research methods include qualitative, quantitative, and mixed methods (cite). I selected the qualitative method to use open-ended questions. Qualitative researchers use openended questions to discover what is occurring or has occurred (cite). In contrast, quantitative researchers use closed ended questions to test hypotheses (cite). Mixed methods research includes both a qualitative element and quantitative element (cite). To explore (your topic), I will not be testing hypotheses which is part of a quantitative study or the quantitative portion of a mixed methods study. 47 Note: As you can see, the example clearly starts with topic sentences (red text) that foreshadow what is to be addressed in the paragraph. Notice the quantitative method paragraph does not address the design, as the topic sentence does not suggest the design is the focus of the paragraph. The design is not foreshadowed in the topic sentence. Remember, a topic sentence alerts the reader to the main topic of the paragraph. March 2016 39 I considered four research designs that one could use for a qualitative study on (2-3 words identifying your topic): (a) miniethnography, (b) focus group, (c) narrative, and (d) case study. (Note: Select the designs that you considered and are applicable to an applied qualitative study.) Miniethnography involves… (Briefly discuss miniethnography, 1-sentence defining with a citation, 1-sentence if needed why it is or is not the optimal choice). Business researchers use focus groups to… (Briefly discuss focus groups, 1-sentence defining with a citation, 1-sentence if needed why it is or is not the optimal choice). A narrative design entails… (Briefly discuss narrative designs, 1-sentence defining with a citation, 1-sentence if needed for why it is or is not the optimal choice). Case study researchers… (Briefly discuss case study, 1-sentence defining with a citation, 1-sentence is needed why it is or is not the optimal choice).

Is it not in the best interest of the police to have citizens record their activity particularly when a citizen may bring a false accusation of excessive force or other charge

Does the fact that police and law enforcement promote the use of CC-TV cameras in public places to deter criminal activity and for use in criminal investigations, yet balk at citizen use of recording devices to capture police activity in public spaces appear contradictory and self-serving? Or, do the police have a valid reason for citizens to refrain from recording such activity? Is it not in the best interest of the police to have citizens record their activity particularly when a citizen may bring a false accusation of excessive force or other charge?

Discuss the key risks to a health care organization that fails to allocate sufficient support and resources to a newly implemented health care information system

“Strengths and Weaknesses of System Acquisition and Implementation”

  • What are the various options for acquiring a health care information system and the advantages and disadvantages of each option?
  • Discuss the key risks to a health care organization that fails to allocate sufficient support and resources to a newly implemented health care information system. Next, propose one (1) strategy to mitigate the risks in question. Provide a rationale to support your response.

Advantages of a senior manager praise the team’s progress

You’re considering whether to apply for a headquarters job at Galaxy Global Express (GGE), which competes with FedEx and UPS in the market for express delivery services. Researching GGE, you found the following quotes from executives, employees, and financial analysts. Indicate whether each quote reflects high motivation, high morale, low motivation, or low morale. Select High motivation High morale Low motivation Low morale  “I feel energized when I go to work, because GGE gives me a great deal of freedom to apply my knowledge and make decisions when problems arise.” Select High motivation High morale Low motivation Low morale  “My coworkers and I worry about GGE’s financial stability. We’re not sure our jobs are safe, and many coworkers call in sick so they can go on job interviews with other firms.” Select High motivation High morale Low motivation Low morale  “Although I like my manager and my peers, task assignments are so repetitive and projects are so boring that I do the minimum amount of work I can get away with.” Select High motivation High morale Low motivation Low morale  “The people in my department are very enthusiastic about their jobs, and turnover is lower than in other departments.” Digging deeper before your interview, you learned more about GGE’s employee policies and programs. Use the drop down menu to match each item in the following list with the corresponding level in Maslow’s hierarchy of needs. Select Self-actualization needs Safety needs Physiological needs Esteem needs Social needs  Employees who successfully complete unusually challenging work assignments are honored at the annual holiday banquet. Select Self-actualization needs Safety needs Physiological needs Esteem needs Social needs  New employees receive generous health and life insurance coverage starting 30 days after they join the company. Select Self-actualization needs Safety needs Physiological needs Esteem needs Social needs  GGE offers numerous educational courses for employees who want to sharpen their skills or add to their knowledge. Select Self-actualization needs Safety needs Physiological needs Esteem needs Social needs  Employees can order free lunch from the company’s cafeteria and take snacks back to their desks. Select Self-actualization needs Safety needs Physiological needs Esteem needs Social needs  GGE sponsors free clubs for employees who want to participate in group hikes, ski races, and other activities. You’ve just left your interview with GGE. Reviewing your notes, you can see that the company is applying Herzberg’s motivation-hygiene theory. Using the drop down menu, categorize each item from your notes as either a motivation factor or a hygiene factor. Select Hygiene factor Motivation factor  GGE strives to pay employees more than the competition. Select Hygiene factor Motivation factor  GGE employees are promoted quickly as they demonstrate the ability to assume additional responsibilities. Select Hygiene factor Motivation factor  GGE uses 360-degree performance evaluation to determine how peers and subordinates get along with each other. Select Hygiene factor Motivation factor  GGE uses “employee of the week” awards to honor outstanding job performance. Select Hygiene factor Motivation factor  GGE sponsors free clubs for employees who want to participate in group hikes, ski races, and other activities. Select Hygiene factor Motivation factor  GGE’s offices are spacious enough to allow for private, quiet work spaces for all. You began work at Galaxy Global Express last month, as an assistant director of employee training. You and your team of 10 employees provide orientation for new employees and hold skill-building training workshops every week for current employees. You’re also responsible for motivating your subordinates to perform well on their own and as part of a team. Using the drop down menu, decide what type of reinforcement you will use in each of the following situations. Select positive reinforcement punishment extinction expectancy  Glen is such an enthusiastic trainer that he often runs over his allotted time during a workshop, usually only by a few minutes. Employees who attend the trainings have tight schedules and must return to work, so a few have been quietly slipping out after the scheduled ending time. Select positive reinforcement punishment extinction expectancy  Ellen recently submitted a detailed outline of a new training program that will be needed when GGE switches to a new cloud computing system later this year. She included many creative ideas that will make it faster and easier for employees to learn to use the new system. Select positive reinforcement punishment extinction expectancy  Barbara has been making nasty personal remarks to coworkers for months. Yesterday a coworker reported that Barbara’s comments were so offensive and inflammatory that he is going to lodge a formal complaint with a government agency. As the director of training with a staff of 26 trainers, you have the opportunity to apply a variety of motivation techniques. Which of the following statements about different motivation techniques are true and which are false? Select True False  FedEx can use job redesign to cultivate the worker-job match and motivate workers by presenting more variety and challenge. Select True False  FedEx can use management by objectives to empower employees so they work hard to achieve individual goals that top management has set. Select True False  FedEx can use behavior modification to empower high-performance employees to achieve specific goals. Select True False  FedEx can institute flextime with a core time when all employees must be at work, to accommodate personal lifestyles. Assume FedEx is implementing management by objectives. Using the drop down menu, select the order of the following activities for an effective MBO program. Select 1 2 3 4 5 6 7  Manager and employee determine the resources needed for the employee to accomplish the agreed-upon goals. Select 1 2 3 4 5 6 7  Top executives develop preliminary goals that are in line with the organization’s strategy and mission. Select 1 2 3 4 5 6 7  Manager meets with each employee to review the goals that have been met and the goals that have not been met, and determine reward(s) for achievement. Select 1 2 3 4 5 6 7  Top executives agree to support, approve, and participate in the MBO project. Select 1 2 3 4 5 6 7  Together, manager and employee agree on individual goals for that employee, based on the department’s and organization’s goals. Select 1 2 3 4 5 6 7  Manager meets with each employee to explain the organization’s and department’s goals and requests input on how the employee can help accomplish those goals. Select 1 2 3 4 5 6 7  Manager and employee meet regularly to review progress toward individual goals. You are a manager at Apple, where you supervise the department that designs visual layout and fixture placement for Apple stores worldwide. Six months ago, you began a pilot program with two self-managed teams. This morning, you jotted down your comments about the pilot program. Use the drop down menu to identify which comments represent advantages and which represent disadvantages of self-managed teams. Select Advantage Disadvantage  Team members are enjoying the stimulation and creativity of varying their work tasks. Select Advantage Disadvantage  At times, team members are unsure which member will take the lead for a particular project. Select Advantage Disadvantage  Special coaching and education was needed to teach members all the tasks for which the team is responsible. Select Advantage Disadvantage  These teams are using their resources more efficiently and completing project earlier than scheduled. Select Advantage Disadvantage  Team members say they have even more positive feelings about the company and their jobs compared to how they felt before the pilots began. You’ve invited members of several Apple departments to be involved in the problem-solving team assigned to create the new display fixture. Although you have only one month to complete this project, the team has to move through five stages of development: Forming, Storming, Norming, Performing, and Adjourning. Use the drop down menu to select the correct stage of group development for each statement. Select Forming Storming Norming Performing Adjourning  The team is working in harmony and focusing to accomplish its goals. Select Forming Storming Norming Performing Adjourning  Members are getting to know each other and some conflict may occur as they develop goals. Select Forming Storming Norming Performing Adjourning  With the project completed on time, the team disbands. Select Forming Storming Norming Performing Adjourning  The team meets for the first time and a group dynamic begins to emerge. Select Forming Storming Norming Performing Adjourning  Members recognize the roles of others and develop a sense of unity as the group stabilizes. The problem-solving team you formed at Apple is struggling to gain cohesiveness. Of the following statements about this aspect of teamwork, which are true and which are false? Select True False  As team members become more familiar with each other, their frequent interaction helps to build cohesiveness. Select True False  Hearing a senior manager praise the team’s progress or accomplishment can strengthen the team’s cohesiveness. Select True False  If the team has to compete with another team for recognition, the conflict can detract from cohesiveness. Select True False  Larger teams are more cohesive because roles are clearer and the work is shared by more people.
45 m

CLICK TO ORDER NOW