A Draft for Risk Management Plan: Health Network, Inc.

Running head: A DRAFT OF RISK MANAGEMENT PLAN: HEALTH NETWORK, INC.
A Draft for Risk Management Plan: Health Network, Inc.
Name of the university
Name of the student
Author note

1A DRAFT FOR RISK MANAGEMENT PLAN: HEALTH NETWORK, INC.
Introduction
The purpose of this risk management plan is to assist the company, Heath Network Inc., to
get rid of its archaic management plan in order to combat market threats. The objective behind
reconsidering the management policy is to treat existing risks and recognise new threats. Additionally,
it will provide strategic solutions to mitigate them.
Scope
This plan can be applied to any fictitious organisations dealing with health services, who are
struggling to fight against market threats and looking for a better management to recover from
ongoing crisis.
Compliance laws and regulations
As understood from the scenario, products are related to IT infrastructure and carries high risk
in terms of privacy (Webb et al., 2014). Web contents of a particular organization must be in safe
hands and for that, a company must comply with privacy policies. A company needs a secured IT
infrastructure not only to comply with legislation yet these are important in order to maintain company
reputation.
 IT security rules improves the infrastructure of corporate security in terms of keeping the
patients’ information and business data private.
 Considering the frequent loss of important business data regarding sales, monetary exchange
from the system, developed security measures prevent online threats of spams.
 Improved security policy and infrastructure is the reason why customers trust an organization
with their personal data (Zhang et al., 2015).
 The control over entire system increases and the cases of employees’ mistakes or practice of
stealing company property can be reduced.
 General data protection regulation has been structured to protect the rights of citizens of EU
from online breaches. It can be applied to every organization dealing with personal
information of citizens even if it is not located at EU (Maldoff, 2017).