COBIT – Managed Risk Practices (Due 8 June) (4 Pages) (4 References)

Requirements:
1) APA 7th Ed format (to include introduction and conclusion)
2) Due 8 June
3) 4 Page minimum (not including title page and APA references)
4) Minimum of 4 References (including the 4 provided/uploaded)
5) Plagiarism-Free
Background/Required Reading/REQUIRED References:
https://resources.sei.cmu.edu/asset_files/TechnicalReport/2010_005_001_15287.pdf 
COBIT® CMMI® V1.3 Practices Pathway Tool enables an IT manager to build the governance requirements. This framework includes all organizational processes from low level to high level. One of these requirements is managing risk.
Managed Risk Objective Description: Continually identify, assess and reduce I&T-related risk within tolerance levels set by enterprise executive management.
Managed Risk Objective Purpose Statement: Integrate the management of I&T-related enterprise risk with overall enterprise risk management (ERM) and balance the costs and benefits of managing I&T-related enterprise risk.
6 Managed Risk Practice areas:
· Collect data: Identify and collect relevant data to enable effective I&T-related risk identification, analysis and reporting.
· Analyze risk: Develop a substantiated view on actual I&T risk, in support of risk decisions.
· Maintain a risk profile: Maintain an inventory of known risk and risk attributes, including expected frequency, potential impact and responses. Document related resources, capabilities and current control activities related to risk items
· Articulate risk: Communicate information on the current state of I&T-related exposures and opportunities in a timely manner to all required stakeholders for appropriate response
· Define a risk management action portfolio: Manage opportunities to reduce risk to an acceptable level as a portfolio.
· Respond to risk. Respond in a timely manner to materialized risk events with effective measures to limit the magnitude of loss.
Assignment:
Write a 4-page paper, to include introduction, body, conclusion, addressing the following scenario in your paper:
Raising Dough Baking Company (a fictitious company), a statewide business that employs over three hundred people. Raising Dough collects online orders from homes and small businesses and delivers its products via a company-owned fleet of trucks (think Amazon on a small scale).
Select 3 of the 6 COBIT manage risk practice areas of interest (listed above) for the fictitious Raising Dough Baking Company and write a report. To guide your report, discuss why you made certain selections; perhaps this is an issue in your workplace you wish to address. Sum up by offering recommendations resulting from your analysis.