Risk Management

P a g e | 0
Risk Management

P a g e | 1
Executive Summary
The aim of this report is to prepare a risk register for a bank to identify different risks
which affect the operations of the banks. The first part of this report used a Risk Assessment
Matrix in order to identify and prioritise different risks along with an evaluation of policies
which can be adopted by the bank to mitigate these risks. In the second part of this report,
of the role of a Chief Information Security Officer is evaluated and recommendations are
given to for the appointment of a Chief Information Security Officer in an organisation.

P a g e | 2
Table of Contents
Part One.....................................................................................................................................3
Identification of Risks.............................................................................................................3
Risk Assessment Matrix..........................................................................................................3
Impact of the Risks.................................................................................................................4
Part Two.....................................................................................................................................6
Recommendations on the Appointment of a CISO................................................................6
References..................................................................................................................................9