Group Project

The objective of this project is to simulate real world experiences as a Security Risk Management analyst.
In light of the foiled 2015 terror attacks on a train oversees; your group was hired by Washington Metropolitan Area Transit Authority (WMATA) to assess its security posture. You are required to identify potential risks to its operations and recommend risk management strategies to address critical business functions.
Note: Washington Metropolitan Area Transit Authority (WMATA) is a huge sector, so you have to choose and focus on one of its systems which will you scope and write about it.
Grading Criteria:
WMATA is a large organization with several business functions and presumed IT services. Therefore, it is imperative that you provide the following:
o The introduction:
o The scope of your project and justification that it addresses critical business functions.
Chapter 4 p 89
o A Business Impact Assessment (BIA)
Chapter 12 p 324
Risk Identification Business Function or Process Potential Impact of Business Recovery Time Objective Maximum Time needed to Recover Operation

o Risk management plan with at least five (5) risks statements and mitigation
Risk statement: Chapter 4 P 102
Example
If AV software is not installed on the Web server, then the likelihood that the server will become infected is high. The Web server has a constant connection to the Internet.
Mitigation Options:
Base on the selected risk statements.
o A Business Continuity Plan in the event that a risk is realized during rush hour (i.e. 6 – 9 a.m. and 4 – 7p.m.on weekdays)
Chapter 13
o Considerations for a Disaster Recovery Plan.
o Demonstrate your recommendation(s) are in alignment with Federal Security controls or general risk management guidance.
(NIST)

Please write 23 pages follow the above requirements using at least 10 scholarly references. Also don’t forget to put the Citations.
Note: wiki and blog reference are not acceptable.

Group Project

The objective of this project is to simulate real world experiences as a Security Risk Management analyst.
In light of the foiled 2015 terror attacks on a train oversees; your group was hired by Washington Metropolitan Area Transit Authority (WMATA) to assess its security posture. You are required to identify potential risks to its operations and recommend risk management strategies to address critical business functions.
Note: Washington Metropolitan Area Transit Authority (WMATA) is a huge sector, so you have to choose and focus on one of its systems which will you scope and write about it.
Grading Criteria:
WMATA is a large organization with several business functions and presumed IT services. Therefore, it is imperative that you provide the following:
o The introduction:
o The scope of your project and justification that it addresses critical business functions.
Chapter 4 p 89
o A Business Impact Assessment (BIA)
Chapter 12 p 324
Risk Identification Business Function or Process Potential Impact of Business Recovery Time Objective Maximum Time needed to Recover Operation

o Risk management plan with at least five (5) risks statements and mitigation
Risk statement: Chapter 4 P 102
Example
If AV software is not installed on the Web server, then the likelihood that the server will become infected is high. The Web server has a constant connection to the Internet.
Mitigation Options:
Base on the selected risk statements.
o A Business Continuity Plan in the event that a risk is realized during rush hour (i.e. 6 – 9 a.m. and 4 – 7p.m.on weekdays)
Chapter 13
o Considerations for a Disaster Recovery Plan.
o Demonstrate your recommendation(s) are in alignment with Federal Security controls or general risk management guidance.
(NIST)

Please write 23 pages follow the above requirements using at least 10 scholarly references. Also don’t forget to put the Citations.
Note: wiki and blog reference are not acceptable.