Risk management

After receiving your briefing of the threat analysis, the Executive Board has an increased interest in your security program. The CEO has asked for an overview of your plan for implementing the fixes to the problems. You advise that risk management is a continuous process but offer a briefing on the framework and some of the immediate “fixes” that will be implemented in the initial projects.

Based on your research for Unit 3:

Explain the overall RMF process to the board and how it will improve security overtime.

Select the categorization of the corporate network using the Low-Moderate-High impact levels for confidentiality, integrity, and availability and brief that decision to the board.

Give some examples of planned fixes to improve security for those areas.

Explain how this effort will require financial and organizational support.

Explain how the impact levels selected for categorization will aid in resource allocation.