Docstoc

Risk Management Plan Security

Document Sample
Risk Management Plan Security Powered By Docstoc
					                           Risk Management
                                 Plan
                      This document prepared by
  [Business Owner, Business Transition Manager or Appointed Reviewer
                          (name & position)]


                         [Agency/Organization/Division Name]

                                 [PROJECT NAME]
                  VERSION: [VERSION                        REVISION DATE: [DATE]
                      NUMBER]
Executive Sponsor

[Name]                                      [Email]                     [Telephone]


Signature:                                                              Date:


Project Manager

[Name]                                      [Email]                     [Telephone]


Signature:                                                              Date:


Other (Information Security Office)

[Name]                                      [Email]                     [Telephone]


Signature:                                                              Date:



Other (CIO/DCIO)

[Name]                                      [Email]                     [Telephone]


Signature:                                                              Date:



Other (Business Manager/Chair of Oregon Leadership Committee)

[Name]                                      [Email]                     [Telephone]


Signature:                                                              Date:




D:\Docstoc\Working\pdf\f8b99c8d-d240-4dbf-b410-19864d41f202.doc
           Page 1 of 6
                                       Table of Contents


Table of Contents ....................................................................................... 2
Overview..................................................................................................... 3
Risk Identification and Management ........................................................... 3
Risk Management Team ............................................................................. 4
Risk Management Evaluation ..................................................................... 4
Risk Management Log ................................................................................ 4
Risks Management Log .............................................................................. 5
Document information page ........................................................................ 6
Amendment history ..................................................................................... 6




D:\Docstoc\Working\pdf\f8b99c8d-d240-4dbf-b410-19864d41f202.doc                                 Page 2 of 6
Overview
This plan is a controlling document incorporating the change projects
purpose, goals and objectives to perform necessary risk determination,
assessment and management. The risk management team will identify
and categorize risks. Each risk will be assigned a probability and impact
weighting from which prioritization can be determined. Mitigation strategies
will be assigned to each risk for use in case a risk is realized and thereby
becomes an issue. The risk team meets [insert frequency – weekly, monthly,
here] to discuss the priority risks and add new risks as necessary.
[summarize information here about the plan]


Risk Identification and Management
The project’s plan for risk management is to:

1. Identify risks in creating the solution that the project was undertaken to
   address. The Business Transition Manager/Coordinator is responsible
   for identifying the risks relevant to the business transition effort and
   incorporating these into the overall project risks.

2. These risk will be rated by a factor that will indicate how likely it is that
   this risk will occur:

    Highly Likely to occur,

    Moderate or average chance to occur,

    Low or somewhat likely to occur.
       These ratings will help determine which risks should have a mitigation
       plan.

3. For each risk, identify what triggers or evidence might occur to indicate
   that the risk is about to occur, or is occurring.
4. Develop a mitigation plan or course of action, for moderate and highly
   likely to incur risk ratings, to take if the trigger or evidence occurs.



D:\Docstoc\Working\pdf\f8b99c8d-d240-4dbf-b410-19864d41f202.doc
           Page 3 of 6
Risk Management Team

<Provide a description of the team structure and then list in the table below information
about each member.>
Name              Role                      Phone                     Email
[insert name of   [insert role of member]   [insert phone number of   [insert email address of team
team member]                                team member]              member]




Risk Management Evaluation

<Insert summary after having evaluated the phases of work and checklists to determine
any areas of risk.>



Risk Management Log
The Risk Management Log is a project control and is located in our
<project name/Project file path folders controls>/Risk Management.
The following Risk Management template is attached to enable the reader
in understanding the plan.
This is a suggested Risk Log format. Some projects modify the templates
to represent a more or less rigorous process. Others may prefer to collect
and monitor the Risks after planning via spreadsheets and other automated
tools.




D:\Docstoc\Working\pdf\f8b99c8d-d240-4dbf-b410-19864d41f202.doc                     Page 4 of 6
                                                 Risks Management Log

     Risk Event   Probability Consequence Description of Risk Trigger Recommended    Description of Action   Assign Due Date
                    of Risk     of Risk                                  Action                                To
                     Low,          Low,                             Accept, Avoid,
                   Moderate,     Moderate,                            Transfer,
                     High          High                                Reduce

1
2
3
4
5
6
7
8
9
10
11
12




D:\Docstoc\Working\pdf\f8b99c8d-d240-4dbf-b410-19864d41f202.doc                         Page 5 of 6
Document information page
   Required Information               Definition


   Document:                          [insert document name]
   Document ID:                       [insert document control number or unique ID]
   Version:                           [insert version number]
   Approval Date:                     [insert approval date here]
   Location:                          [insert document file location]
   Owner:                             [insert document owner]
   Author:                            [insert document author]
   Approved by:                       [insert document approver]




Amendment history
   Document          Approval Date             Modified By          Section, Page(s), Text
   Version #                                                        Modified



   [insert           [insert approval          [insert document     [outline sections
   version           date here]                author]              modified]
   number]



   [insert
   version
   number]




D:\Docstoc\Working\pdf\f8b99c8d-d240-4dbf-b410-19864d41f202.doc                         Page
6 of 6

				
DOCUMENT INFO
Description: Risk Management Plan Security document sample