IT Risk Management - Regional Gardens | Study

Running head: IT RISK MANAGEMENT
IT Risk Management: Regional Gardens
Name of the Student
Name of the University
Author’s Note:

1
IT RISK MANAGEMENT
Table of Contents
1. Brief Overview.......................................................................................................................2
2. Policy Purpose and Rationale.................................................................................................2
2.1 Defining the Intent and Rationale of the Policy...............................................................2
3. Policy Scope...........................................................................................................................3
3.1 Defining the Scope of the Policy i.e. who and what it effects.........................................3
4. Roles and Responsibilities.....................................................................................................3
4.1 Defining the Responsibilities of Individuals affected by the Policy, including those
responsible for enforcing the policy as well as those who are affected by the policy...........3
5. Mandatory Requirements.......................................................................................................5
5.1 Inclusion of the Mandatory Requirements for the Rules or Actions that are Reasonable
for placing into the Policy to meet its Intent and Rationale...................................................5
6. Exemptions.............................................................................................................................6
6.1 Inclusion of any Exemption that is reasonable for placing into the Policy to meet its
Intent and Rationale...............................................................................................................6
7. Glossary..................................................................................................................................6
References..................................................................................................................................7

2
IT RISK MANAGEMENT
1. Brief Overview
Regional Gardens Ltd is a popular organization, which runs a number of associated
gardening enterprises. It comprises of a large display garden, which it opens for the purpose
of public inspection, several times in 1 year. The organization even owns the Regional
Gardens Nursery and Regional Gardens Planners. They have a small data centre as the main
site in Bathurst, in which the data storage and servers of the organization are located. The
organization comprises of a range of various types of relatively old personal computers that
run on Windows 7 Enterprise for connecting to the organizational data centre. Moreover, this
particular organization uses different servers for conducting their core business and all of
their servers are independent machines with relatively vanilla installations of the operating
systems.
Most of the staff have access to the desktops and servers and has a haphazard
tendency regarding server administration. Several unused accounts are present and the
external hackers have compromised few desktop machines previously. Furthermore, they do
not have a firewall as well as security system and backup or disaster recovery system. They
do not have proper network security since the servers are present on the same networks. As a
result, it is extremely important and significant to ensure that a data integrity policy is present
in the organization of Regional Gardens for better safety and security of the organizational
servers and data.
2. Policy Purpose and Rationale
2.1 Defining the Intent and Rationale of the Policy
The major purpose of the data integrity policy in Regional Gardens Ltd. is to set a
globalized standard for overall maintenance of the paper records and the electronic data
within the company and even to bring out major transparency in every activity of data
transfer [1]. Moreover, this particular policy is required for meting each and every regulation
and also ensure massive compliance with the data security aspects or data risk management.
The management of Regional Gardens would be highly benefitted with this particular policy
as it would provide proper efficiency in understanding and identifying the consequences of
the breach of data integrity. The data integrity policy would be providing basic control to the
organizational management for ensuring that better effectiveness and efficiency is gained in
the business without much complexity [2].