IT System in ABC Gym

Running head: INFORMATION TECHNOLOGY RISK MANAGEMENT
INFORMATION TECHNOLOGY RISK MANAGEMENT
Name of the Student
Name of the University
Author Note:

INFORMATION TECHNOLOGY RISK MANAGEMENT1
Executive summary
The report highlights the case study of IT system in ABC gym. In the year 1997, the gym was
started. In initial days, the gym had a small space for its members and staff. Due to the increase
in number of members, the gym acquired new space for its members. The owner has around 50
full-time members and 150 part-time members. For running and maintaining the business of
ABC gym, a detail specification was required for the system. The members of gym are corporate
employee members and individual member. All the members of this gym are required to pay
annual subscription fee. Only the corporate employee get benefit that is reduced subscription
rate. ABC gym should make use of virus scanner so that they keep all the software updated.
Installation of anti-virus on the system can easily provide various capabilities for the PC. In
addition, the staff members should keep their system updated, which will prevent them from any
new virus and variation of old threat. IT system can bring huge number of benefits like
operational efficiencies, supply of information, best customer service and lastly development of
communication capabilities.

INFORMATION TECHNOLOGY RISK MANAGEMENT2
Table of Contents
Introduction..........................................................................................................................3
Discussion............................................................................................................................3
Risk Assessment..................................................................................................................3
TVA based on IT control.................................................................................................3
Risk Recommendation.....................................................................................................8
Mitigating risk.................................................................................................................8
Protection mechanism..........................................................................................................9
Identification of gaps...........................................................................................................9
Conclusion.........................................................................................................................11
References..........................................................................................................................12

INFORMATION TECHNOLOGY RISK MANAGEMENT3
Introduction
The following report is all conducting technical risk analysis for ABC fitness Gym. In the
year 1997, the system was owner was named as ABC fitness Gym. In the beginning days of the
Gym, the owner has a small premise and has a capacity of around 20 members. After that owner
acquired new premises and expanded the Gym size (Schwalbe, 2015). At present, the owner can
employ around 50 full time staff members and 150 part-time employees. In addition, the owner
has increased the customer relationship so that they can provide membership to organization. For
running the business of this Gym, a detail system was used for creating IT system. The gym has
two categories of members that is corporate employee members and individual members. Each
of employee is employed by a particular department and the gym wants to know department
where the employees has worked earlier (Dutta, Geiger & Lanvin, 2015). Before joining the
gym, new members are often are asked to take complete tour for free. The equipment’s of the
Gym merely fall under two category that is weight machines and cardiovascular machines.
In the coming pages, a risk assessment has been done by using assets, vulnerabilities and
consequences that is being derived from IT control framework. An identification has been done
with respect to key threats within the organization. A list of recommendation has been provided
with respect to key threats within the organization.
Discussion
Risk Assessment
TVA based on IT control
Cybersecurity is all about proper management, understanding, control and lastly
mitigation of different kind of risks for important asset of the organization. Risk can be defined
as a new concept in business that ultimately results in likelihood of financial loss for gym that
can be high (Marchewka, 2016). There are mainly three factors which are being used in risk
determination are different threats, vulnerability of system and lastly vital asset of gym that can
be damaged. There are common methods by the gym can suffer financial loss that is
Data loss: Stealing of trade secrets of gym that can bring loss to business. Theft of
member’s detail of gym can ultimately result in trust loss and customer attrition.