In: Computer Science
Research and include the following:
Security Risk Mitigation Plan:
The risk response planning involves determining ways to reduce
or eliminate any threats to the project, and also the opportunities
to increase their impact.
Project managers should work to eliminate the threats before they
occur. Similarly, the project managers should work to ensure that
opportunities occur.
Likewise, the project manager is also responsible to decrease the
probability and impact of threats and increase the probability and
impact of opportunities.
For the threats that cannot be mitigated, the project manager needs to have a robust contingency plan and also a response plan if contingencies do not work.
It is not required to eliminate all the risks of the project due
to resource and time constraints. A project manager should review
risk throughout the project.
Planning for risks is iterative. Qualitative risk, quantitative
risk, and risk response planning do not end ones you begin work on
the project.
Risk Response Strategies
The choices of response strategies for THREATS include:
AVOIDANCE: Focus on eliminating the cause and thus, eliminating the threat.
MITIGATION: There are certain risks that cannot be eliminated. However, their impact can be reduced. This is termed as mitigation of risks.
TRANSFERENCE: Transfer the risk to some other party. Insurance purchases, warranties, guarantees, etc are examples of risk transfers
ACCEPTANCE: Passive acceptance leaves action to be determined as
needed, in case of a risk event.
Active acceptance may involve contingency plans to be implemented
if the risk occurs and allocation
of time and cost reserves to the project. A decision to accept risk
must be communicated to stakeholders.
Address change Management/Version Control: Project Management
Plan can be updated by new work activities/packages
that could be added, removed, or assigned to different
resources, thus, making planning an iterative process.