{"id":30689,"date":"2026-04-27T16:59:14","date_gmt":"2026-04-27T16:59:14","guid":{"rendered":"https:\/\/academicwritersbay.com\/solutions\/challenge-3-risk-mitigation-strategy-description-for-this-mission-you-will-leverage-your-research-from-challenge-1-and-prognosis-from-challenge-2-to-impact\/"},"modified":"2026-04-27T16:59:14","modified_gmt":"2026-04-27T16:59:14","slug":"challenge-3-risk-mitigation-strategy-description-for-this-mission-you-will-leverage-your-research-from-challenge-1-and-prognosis-from-challenge-2-to-impact","status":"publish","type":"post","link":"https:\/\/academicwritersbay.com\/solutions\/challenge-3-risk-mitigation-strategy-description-for-this-mission-you-will-leverage-your-research-from-challenge-1-and-prognosis-from-challenge-2-to-impact\/","title":{"rendered":"Challenge 3 \u2013 Risk Mitigation Strategy Description For this mission, you will leverage your research from Challenge #1 and prognosis from Challenge #2 to impact"},"content":{"rendered":"

Challenge 3 \u2013 Risk Mitigation Strategy<\/strong><\/p>\n

Description<\/strong><\/p>\n

For this mission, you will leverage your research from Challenge #1 and prognosis from Challenge #2 to impact a possibility mitigation draw to your chosen company. If considerable, you can well alter your Information Usage Profile<\/em> or your Risk Profile<\/em> the utilize of suggestions from your trainer and additional data from your readings and research. The deliverable for this mission will be a Risk Mitigation Strategy that entails a Security Controls Profile basically based mostly upon the protection and privateness controls catalog from NIST SP 800-53 Revision 5 and the protection capabilities and identifiers from the NIST Cybersecurity Framework (CSF) Model 1.1.<\/p>\n

\u25cf\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 NIST SP 800-53 https:\/\/nvlpubs.nist.gov\/nistpubs\/SpecialPublications\/NIST.SP.800-53r5.pdf <\/p>\n

\u25cf\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 NIST CSF https:\/\/nvlpubs.nist.gov\/nistpubs\/CSWP\/NIST.CSWP.04162018.pdf <\/p>\n<\/p>\n

Ticket:<\/strong> Table 2 Framework Core<\/em> in Appendix A of the NIST Cybersecurity Framework<\/em> offers a crude-reference for every purpose\/class\/sub-class to the protection and privateness controls from NIST SP 800-53.<\/p>\n<\/p>\n

Overview Guidance for Information Security Capabilities & Controls<\/strong><\/p>\n

1.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Overview the NIST Cybersecurity Framework<\/em> with a explicit focal point on the Capabilities, Classes, and Sub-Classes. Keep in suggestions how these capabilities could well well also be employed to mitigate the hazards you identified and documented in Challenge #2.<\/p>\n

2.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Overview Chapter 2 in Security and Privateness Controls for Information Methods and Organizations<\/em> (NIST SP 800-53). Pay special attention to half 2.2 Preserve watch over Structure and Group.<\/p>\n

3.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Overview Appendix A in the NIST CSF to establish security Capabilities\/Classes\/Sub-Classes which specifies possibility mitigations which could well well be applied to diminish or get rid of every possibility listed to your Risk Mitigation Strategy Controls Profile <\/em>(Table 2).<\/p>\n

Originate and Doc Your Security Controls Profile <\/strong><\/p>\n

1. <\/em>Overview the pattern security controls profile offered in Tables 1 & 2 on the conclude of this file. Expend this pattern to handbook your security controls prognosis and the formatting of your Risk Mitigation Strategy Security Controls Profile. <\/em>The pattern entry in Table 2 changed into derived from the entry confirmed beneath (supply: NIST CSF Appendix A Table 2 Framework Core<\/em>).<\/p>\n

<\/strong><\/p>\n

<\/figure>\n

<\/em><\/p>\n

2. <\/em>Replica your Risk Profile (Table 1) from Challenge #2 valid into a brand recent file (to your project submission). Then reproduction the Risk Mitigation Strategy Security Controls Profile <\/em>(Table #2) from this project file into your mission submission file (put it after Table #1). Delete the pattern textual recount from Table #2.<\/p>\n

3. <\/em>Switch the RISK ID and RISK TITLE columns from Table 1 into Table 2. Right here is how you will hyperlink your Risk Profile to your Risk Mitigation Strategy. You ought to dangle 15 or more dangers related to the corporate\u2019s commercial operations, utilize of the Web, the corporate\u2019s IT programs and infrastructures (including \u201capplied sciences in utilize\u201d), and the forms and collections of data odd by the corporate.<\/p>\n

4. <\/em>For every row to your Table 2 (Risk Mitigation Strategy Security Controls Profile<\/em>), desire a security purpose from the NIST CSF which could well well be applied to mitigate the identified possibility. Then, evaluation the Category and Sub-Category data for that purpose. Resolve quite so a lot of sub-classes and enter these into your table in the CSF Category ID column. <\/p>\n

5. <\/em>The usage of the Informative References offered in the NIST CSF Appendix A Table 2: Framework Core, establish 2 or 3 security controls which, if applied, will support to mitigate the explicit possibility listed to your possibility profile.<\/p>\n

6. <\/em>Write a temporary myth description of the chance mitigation draw to your identified possibility. This draw ought to rep from your selected security purpose and controls. Expend the ABC hallmark for writing for govt audiences: accuracy, brevity, and clarity.<\/p>\n

Originate Your Risk Mitigation Strategy<\/strong><\/p>\n

1.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Overview Chapter 1: The Industrial Case for Resolution Assurance and Information Security in the (ISC)2 SSCP Methods Security Certified Practitioner Official Gaze E book<\/em> (the direction textbook).<\/p>\n

This useful resource will enable you desire what data to embody as segment of your Risk Mitigation Technique to your selected company. One more essential useful resource for determining what data ought to be included to your draw is: https:\/\/www.workfront.com\/mission-management\/lifestyles-cycle\/initiation\/commercial-case <\/p>\n

Ticket<\/strong>: this project does no longer require a tubby commercial case. You are no longer required to supply financial data, implementation plans, and many others. Your presentation of your draw ought to focal point on these sections of a commercial case: o Industrial diagram back or quite so a lot of<\/p>\n

<\/strong><\/p>\n

o Benefits o Risk o Technical Solutions o Timescale o Affect on Operations<\/p>\n

2.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Title biggest practices for data security <\/em>and reasons \/ justifications for allocating sources (folks, money, applied sciences) to put in force security controls. <\/em>That it’s probably you’ll well obtain related biggest practices and justifications listed in the Govt Summaries and opening chapters of NIST SP 800-30, NIST SP 800-37, NIST SP 800-53, and the NIST Cybersecurity Framework. That it’s probably you’ll well luxuriate in to chat about your solutions by manner of timeframe for implementation: instantaneous, near-term (6 months?), medium term (12-18 months), within the next two years, and many others. Judge that there could well well ought to be tradeoffs between time and money.<\/p>\n

3.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Rep up your solutions to formulate your Risk Mitigation Strategy. At a minimum, this half ought to embody a summary of the commercial diagram back (decrease dangers related to data and IT programs and infrastructures), the advantages of enforcing security controls, the general forms of dangers to be mitigated (focal point on the CIA triad), and the policy, processes, and technical choices being instructed. <\/p>\n

Write<\/strong><\/p>\n

1.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 An introduction half which gives a temporary introduction to the corporate and the guidelines<\/p>\n

\/ data abilities dangers that it faces (you can well well reuse just a few of your myth from Challenge #1 and\/or Challenge #2). Your introduction ought to embody a temporary overview of the corporate\u2019s commercial operations. Snort this with a description of the cause and contents of this Risk Mitigation Strategy deliverable. <\/p>\n

2.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 A separate prognosis half in which you sleek your Risk Profile. <\/em>Initiate with a summary of your Risk Profile<\/em>. That it’s probably you’ll well reuse your introductory paragraph from Challenge #2 (revise if considerable) where you explained your possibility profile (what data is contained in the table and what sources were odd to impact this data). Consist of a description of the job and documents odd to put the Risk Profile<\/em>. Expose the advantages of the utilize of a possibility profile to wait on address possibility. The citations and named documents in this paragraph will support as citations and attributions for the contents of Table #1 (bring Table #1 Risk Profile<\/em> ahead from Challenge #2 and update if wished). Rep Table #1 on the conclude of this half. <\/p>\n

3.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 A separate prognosis half (Security Controls Profile<\/em>) in which you sleek your Security Controls Profile. Provide an introductory paragraph that explains the protection controls profile, e.g., what data is contained in the table and what sources were odd to impact this data. Picture the job and documents odd to put the Security Controls Profile.<\/p>\n

4.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 A separate half (Risk Mitigation Strategy<\/em>) in which you sleek a high-level draw for enforcing the chance mitigations (security controls) offered earlier in this deliverable. This half ought to embody a summary of the commercial diagram back (decrease dangers related to data and IT programs and infrastructures), the general forms of dangers to be mitigated (focal point on the CIA triad and summarize the hazards you beforehand identified), the advantages of enforcing security controls listed to your Security Controls Profile, and the policy, processes, and technical choices being instructed for implementation (aligned to your Security Controls Profile).<\/p>\n

5.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 A separate Solutions and Conclusions<\/em> half which gives a summary of the guidelines contained in this deliverable and affords your concluding statements regarding the commercial need and commercial advantages which enhance enforcing your Risk Mitigation Strategy and the allocation of sources by the corporate. <\/p>\n

Post Your Work for Grading and Feedback<\/strong><\/p>\n

Earlier than you put up your work, test the rubric (displayed in the Assignment Folder entry) to impact particular that you will dangle lined all required recount including citations and references.<\/p>\n<\/p>\n

Post your work in MS Notice structure (.docx or .doc file) the utilize of the Challenge #3 Assignment to your project folder. (Set the file.)<\/p>\n

Further Information<\/strong><\/p>\n

1.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Your 8 to 10 net page deliverable ought to be legitimate in look with fixed utilize of fonts, font sizes, colors, margins, and many others. You ought to utilize headings and sub-headings to prepare your paper. Expend headings which correspond to the recount rows in the rubric \u2013 this could well impact it more uncomplicated to your trainer to obtain required recount parts and could well well enable you impact particular that you will dangle lined all required sections and recount to your paper.<\/p>\n

2.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 The talked about net page length is a advice basically based mostly upon the recount requirements of the project. All pages submitted will be graded however, for the wonderful grades, your work ought to be determined, concise, and factual. Exceeding the instructed length is no longer going to basically consequence in a increased grade. Shorter submissions could well well no longer fully meet the recount requirements leading to a decrease grade.<\/p>\n

3.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 The INFA program requires that graduate students discover popular APA style steering for every formatting and citing\/reference sources. Your file submission ought to be in MS Notice structure (.docx). PDF, ODF, and other forms of data are no longer acceptable.<\/p>\n

4.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 It be considerable to embody a conceal net page with the direction, the project title, your name, your trainer\u2019s name, and the due date. Your reference list ought to be on a separate net page on the conclude of your file. These pages enact no longer count in the direction of the project\u2019s minimum net page count. <\/p>\n

5.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 You are anticipated to write grammatically simply English in every project that you put up for grading. Attain no longer flip in any work without (a) the utilize of spell test, (b) the utilize of grammar test, (c) verifying that your punctuation is barely and (d) reviewing your work for simply observe usage and accurately structured sentences and paragraphs. <\/p>\n

6.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 You are anticipated to credit ranking your sources the utilize of in-textual recount citations and reference list entries. Each your citations and your reference list entries ought to discover APA Style steering. Expend of required readings from the direction as sources is anticipated and inspired. Where odd, you could cite and present references for these readings.<\/p>\n

7.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 When the utilize of Security and Privateness controls from NIST SP 800-53, you could make utilize of the genuine numbering and names (titles) when regarding these controls. This data does no longer ought to be handled as quotations. That it’s probably you’ll well paraphrase or quote from the descriptions of the controls offered that you because it can well well also be designate copied textual recount (if any) and put a citation for every quoted and paraphrased data.<\/p>\n

8.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Consult the grading rubric for pronounce recount and formatting requirements for this project.<\/p>\n

9.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 All work submitted to the Assignment Folder will be scanned by the Turn It In carrier. We utilize this carrier to wait on establish areas for development in pupil writing.<\/p>\n

<\/strong><\/p>\n<\/p>\n

Table 1. Risk Profile for [company]<\/strong><\/p>\n<\/p>\n

<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\n

Risk ID <\/b><\/o:p><\/p>\n<\/td>\n

\n

Risk Title <\/b><\/o:p><\/p>\n<\/td>\n

\n

Description <\/b><\/o:p><\/p>\n<\/td>\n

\n

Risk Category <\/b><\/o:p><\/p>\n<\/td>\n

\n

Affect Level <\/b><\/o:p><\/p>\n<\/td>\n<\/tr>\n

\n

001 <\/o:p><\/p>\n<\/td>\n

\n

Unauthorized disclosure of buyer data. <\/o:p><\/p>\n<\/td>\n

\n

Disclosure of or derive admission to to buyer data ought to be restricted to authorized people with a ought to know. Unauthorized disclosure or derive admission to could well well consequence in wound to customers and financial liabilities for the corporate. <\/o:p><\/p>\n<\/td>\n

\n

Individuals <\/o:p><\/p>\n<\/td>\n

\n

Medium <\/o:p><\/p>\n<\/td>\n<\/tr>\n

\n

002 <\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n<\/tr>\n

\n

003 <\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n<\/tr>\n

\n

004 <\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n<\/tr>\n

\n

005 <\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n<\/tr>\n

\n

006 <\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n<\/tr>\n

\n

007 <\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n<\/tr>\n

\n

008 <\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n<\/tr>\n

\n

009 <\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n<\/tr>\n

\n

010 <\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n<\/tr>\n

\n

011 <\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n<\/tr>\n

\n

012 <\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n<\/tr>\n

\n

013 <\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n<\/tr>\n

\n

014 <\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n<\/tr>\n

\n

015 <\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n

\n

<\/span><\/o:p><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

<\/p>\n<\/p>\n

<\/strong><\/p>\n<\/p>\n

<\/strong><\/p>\n

Table 2. Risk Mitigation Strategy Security Controls Profile<\/strong><\/p>\n

<\/p>\n\n\n\n\n
<\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

<\/p>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Challenge 3 \u2013 Risk Mitigation Strategy Description For this mission, you will leverage your research from Challenge #1 and prognosis from Challenge #2 to impact a possibility mitigation draw to your chosen company. If considerable, you can well alter your Information Usage Profile or your Risk Profile the utilize of suggestions from your trainer and […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-30689","post","type-post","status-publish","format-standard","hentry","category-solutions"],"_links":{"self":[{"href":"https:\/\/academicwritersbay.com\/solutions\/wp-json\/wp\/v2\/posts\/30689","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/academicwritersbay.com\/solutions\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/academicwritersbay.com\/solutions\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/academicwritersbay.com\/solutions\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/academicwritersbay.com\/solutions\/wp-json\/wp\/v2\/comments?post=30689"}],"version-history":[{"count":0,"href":"https:\/\/academicwritersbay.com\/solutions\/wp-json\/wp\/v2\/posts\/30689\/revisions"}],"wp:attachment":[{"href":"https:\/\/academicwritersbay.com\/solutions\/wp-json\/wp\/v2\/media?parent=30689"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/academicwritersbay.com\/solutions\/wp-json\/wp\/v2\/categories?post=30689"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/academicwritersbay.com\/solutions\/wp-json\/wp\/v2\/tags?post=30689"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}