The objective of this project is to develop a Risk Assessment Report for a company, government agency, or other organization. The analysis will be conducted using only publicly available information (that is, information obtainable on the Internet (using a browser), company reports, news reports, journal articles, etc.). The risk analysis should consider legitimate, known threats that pertain to the subject organization. Based on the information gathered, presumed vulnerabilities of the company or organization’s computing and networking infrastructure will be identified. Then, based on the identified threats and vulnerabilities you will describe the risk profile for the subject organization and suggest recommendations to mitigate the risks. The students will demonstrate in the Research Paper project their ability to communicate clearly and acquisition, application and integration of knowledge skills. We will have rubrics to evaluate risk analysis subject matter competency and communications and knowledge competencies.

You will submit a brief proposal (page and half long, double-spaced) in session 4. The proposal should include description of the organization you are proposing to analyze, scope (e.g., entire organization, key business area, major system, etc.) for the risk assessment, research methods to be used and preliminary list of research information sources and references. Your instructor will provide feedback on the suitability of the proposed subject organization and the scope, as well as the suitability of the proposed research methods and information sources.