Risk Analysis : The American Red Cross

Risk assessment is used to determine the extent of handling threats and the risks associated with an IT system throughout its life cycle.

Risk Management is an internal IT strategy used to align the IT risk management plans with the business strategic initiatives to reduce the IT threats. Incorporating this process will ensure IT risks are managed, and the impacts are identified and monitored effectively.

data and risks will help a company to design strong policies, procedures and standards that will help to keep data secure.

The American Red Cross of America is the type of organization that produces products to support disaster relief, supporting the military families, health and safety training and education, blood drives for lifesaving blood and

Risk management includes the “overall decision-making process of identifying threats and vulnerabilities and their potential impacts, determining the costs to mitigate such events, and deciding what actions are cost effective to take to control these risks” (Conklin et al, 2012, pg. 678). For the proper development of risk management techniques, every person at every level of the organization, especially those involved in the Information Security (IS) department “must be actively involved in the following activities:

Due to the lack in data security elements, the following recommendations are suggested: strategy and risk assessment. Overall data security begins with the identification of risks and the strategy on the solution to those risks. This can be accomplished through a Strength Opportunities, and Threats (SWOT) analysis. Strengths and weaknesses are derived from internal factors, such as employees, while opportunities and threats are derived from external factors, such as hackers (Value Based Management, 2011).

(“A Brief”). The American Red Cross continued to provide services to members of the armed forces, even during the Korean, Vietnam, and Gulf war’s (“A Brief”). The American Red Cross continued to expand their services into fields such as civil defense, training in CPR/AED, education in HIV/AIDS, and providing support and care in the wake of disasters both emotional and physically (“A Brief”). Since 2006 the American Red Cross has been working with FEMA helping government agencies and community organizations plan, coordinate and provide shelter, feeding, and family reunification services for people affected by disasters (“A Brief”). Today the American Red Cross provides compassion and care in areas such as, Blood collection, processing, and distribution, support for members of the military and their families, health and safety training and education, relief and development internationally, and people affected by disasters in America (“A

An effective information security program should include, periodic assessments of risk, including the magnitude of harm that could result from the unauthorized access, use, disclosure, disruption, modification, or destruction of information and information systems that support the operations and assets of the organization. Policies and procedures should be based on risk assessments, cost effective reduced information security risk, and it should ensure that the information security is addressed throughout the entire life cycle of each and every organizational information system. Subordinate plans for providing sufficient information security for groups of the information system, facilities, networks, or information systems.

The American Red Cross is one of the most prominent and ever evolving organizations of our century. They’re a company that helps prevent and formulate drastic measures to small measures to relieve the suffering that people go through every day in the face of emergencies. They are as effective and efficient as the military as they can mobilize forces of volunteers and with willing to give from donors strengthen and power American Red Cross. They are the main and primary emergency preparedness and response organization. The ARC will and is always ready to bring gracious, protecting, and saving comfort to all humans that are face to face in disastrous situations and crises, from tsunamis to tornadoes to earth shaking quakes. Red Cross turns to volunteers to many of the members of the military to give and provide lifesaving blood for the need of survivors of disasters around the world, every time the clock ticks a second, and every day that the sun rises.

Incident information disclosure is an important, circuitous concern that requires acceptable centralized procedures in place to facilitate incident response processes and do not cause more harm for the organization and its audiences. Keeping information and operations secured, appropriately is of basic importance for any organization, which becomes the assignment of cyber

This paper discusses three risk analysis methodologies, specifically, MSRAM, OCTAVE, and CRAMM and provides a detailed description of each and how they incorporate risk into a platform for decision makers to use in their endeavors to prevent, protect, mitigate, respond, and in recovery measures as part of the risk assessment and management processes.

1. American Society for Healthcare Risk Management (ASHRM) identifies the following four key components and specific steps for a risk management program. They are risk identification, risk analysis, risk treatment and risk evaluation. First, in the risk identification process, both incident reports and patients’ complaints are helpful to identify the risk. In this case, the twins’ mom, Kimberly Quaid’s complaint was the first indicator of the risk. Second, risk analysis can be done prior to administration of the drug Heparin. At this stage, the risks of mixing-up Heparin with other drugs are proactively addressed. Third, risk treatment can be applied with risk control techniques. Possible risk control techniques include labeling all the pediatric

Information security professional’s job is to deploy the right safeguards, evaluating risks against critical assets and to mitigate those threats and vulnerabilities. Management can ensure their company’s assets, such as data, remain intact by finding the latest technology and implementing the right policies. Risk management focuses on analyzing risk and mitigating actions to reduce that risk. Successful implementation of security safeguards depends on the knowledge and experience of information security staff. This paper addresses the methods and fundamentals on how to systematically conduct risk assessments on the security risks of information systems.

The reader will become familiarised with the term risk and it definitions from specifically the ISO 31000 standard of risk management and also the definition of risk from the criminology crime triangle. Which one of these two definitions that are the most suitable for usage within the security industry will be discussed and evaluated. How and why consequence is important when assessing risk priorities and determining where to allocate resources will be examined and answered.

One well accepted description of risk management is the following: risk management is a systematic approach to setting the best course of action under uncertainty by identifying, assessing, understanding, acting on and communicating risk issues. In order to apply risk management effectively, it is vital that a risk management culture be developed. The risk management culture supports the overall vision, mission and objectives of an organization. Limits and boundaries are established and communicated concerning what are acceptable risk practices and outcomes. Since risk management is directed at uncertainty related to future events and outcomes, it is