Bank of America

Writer’s ChoiceYou are working in the cybersecurity department of one of these businesses and tasked with assisting in a newly developed risk management team. You are tasked with providing a risk management plan for your division. This can be company-wide or on a specific system. Bank of America their online banking platform.
Your Risk Management Plan should cover the following areas:
**Research and identify your Risk Management Goals at the Organizational, Mission/Business, and Information system levels
**Perform a system categorization to identify a baseline set of controls to implement
**Identify any additional controls that you feel are necessary for protecting your systems
**Identify any associated laws or regulations with your organization
**Identify any threats – Provide at least 3
**Identify at least 3 vulnerabilities
**Provide at least two (Research the companies and identify if there was any related breaches or malware incidents, identify what vulnerabilities that caused those. If there is none available use data from the threat reports for similar companies in the industry)
**Determine the risk of these vulnerabilities
**Use a quantitative method from the How to Measure Anything in Cybersecurity Risk
**Should include likelihood (use threat report data) and impact (research to identify how much income these systems produce, or applicable fines)
**Provide recommendations of mitigating the risk of these vulnerabilities
**For example this could be implementing a tool from Assignment 3, transferring the risk, providing training, etc.
**Use the Safeguard implementation plan from NIST SP 800-30 Appendix C

****Title Page
Contents
References (minimum of 6)
12-15 pages| Double Spaced| APA format | Title and References excluded from page count