Part of the reason IT Risk Management is required is that the IT landscape is under regular change. Choose any one of the following
•The internet and the web
•Outsourcing IT services
•USB devices
•Wireless and mobile communication
•Virtualisation
•Cloud Computing
a) How has the IT landscape changed?
b) What are the new risks/threats? (e.g. confidentiality, integrity, availability think back on CNSS model )
c) How severe are the risks?
d) What can we do to mitigate/reduce the risks?
Write a paragraph on the topic you choose and another paragraph covering the above questions.
2) Consider the statement below
Security patches should always be installed unless the risk of applying the patch is higher than the risks of being compromised
Patching is a problematic activity since patches and upgrades are meant to improve software, but they may also disrupt a running system if they are not properly tested and may have unintended consequences on the patched system, or a system dependent on the patched system
a) Based on this observation, how might you determine if the new patch is worth installing?
b) How do you approach this issue at work?
c) Can you develop a better approach?

Read less