Risk Management: Cyber Security and Resilience

Running Head: Risk Management 0
Risk Management
An Executive Briefing Paper
Student name
5/2/2019

Risk Management 1
Table of Contents
Executive summary.................................................................................................... 2
Introduction................................................................................................................ 3
Cyber security importance...................................................................................... 3
Management of Cyber security Risks......................................................................4
Education and Awareness....................................................................................... 6
Resilience and Preparedness................................................................................... 6
Legislative Proposals and Actions........................................................................... 7
Recommendations...................................................................................................... 8
Conclusion.................................................................................................................. 9
References............................................................................................................... 10

Risk Management 2
For Senior Executive Team of Banksia Pathology
Improving Banksia’s Cyber Resilience as an Executive/Board-level Responsibility
April 28, 2019
Executive summary
Information system is a basic requirement of most of the organizations to manage
their operations in proper way with security and privacy of data. In addition, it is
necessary to manage potential risks of data and information of the organization
from cyber-attacks and data breaches.
This paper will provide details about the risk from cyber-attacks on IS/IT of Banksia
Pathology. It will provide solutions about how to handle cyber-attacks using proper
cyber-security standards. Cyber security is serious concern in front of most of the
organization, which uses information system to manage their operations.

Risk Management 3
Introduction
Cyber security is a huge issue in front of all those organizations. It is an essential
thing for an organization to secure information from cyber-attacks through a proper
security channel. In addition, macro-electronics framework is helpful for evaluation
of cyber security of an organziation (Andrijcic & Horowitz, 2016, p. 907). They
should implement proper security arrangements to protect data and information of
organization. It is a serious concern after different cyber-attacks are happened in
last two decades.
Banksia should secure there Information System (IS) from cyber-attacks using
proper cyber security. Many companies are providing cyber security to information
systems of an organziation form cyber-attacks. Therefore, it is necessary to manage
their resources with the help of security programs.
Cyber security is a solution of cybercrimes and cyber-attacks, which makes a huge
impact on the reputation of the organization as well as performance and growth of
the organization. Attackers use customer’s information for their personal benefits,
such as spamming, and many more. However, information system has required high
security and privacy from cyber security point of view (Von Solms & Van Niekerk,
2013, p. 97). Banksia uses information system for different purposes, such as
rostering, annual leave, HR matters, salary, and contract related inquiry. Therefore,
they required proper security management and they must identify vulnerabilities of
their system to make proper risk controls based on their vulnerabilities. All the risks
of information system should have rank and their controls to mitigate them as soon
as possible from the system (Baccarini & Archer, 2001, p. 139).
Currently employees are facing performance issues with the IS/IT services especially
in the front-desk system, Patient Management Portal (“be-PMP”), and Pathology
Intranet Portal (“be-PIP”). In present era, everyone is going for technological
solutions of different issues in the company and from company point of view; it
can provide competitive advantage to the Banksia. There are many devices in
the medical field, which required latest hardware and software. Therefore, it is