IT Risk Assessment for Aztek

This report provides a comprehensive IT risk assessment for Aztek, an Australian financial services company. It begins by reviewing the project's impact on Aztek's current security posture, highlighting the increasing importance of data security in the digital age. The report then identifies various risk factors, categorizing them as internal and external, and further classifying them based on their causes (intentional or unintentional). Specific risks to data security are addressed, emphasizing the potential for damage from hacking, malware, and other cyber threats. The report details risk mitigation strategies, aligning with regulations and best practices, and proposes methods to reduce both the likelihood and impact of identified risks. The conclusion emphasizes the ongoing nature of risk management and the need for continuous improvement in security measures to protect data and organizational assets. The report includes a substantial list of references, supporting its analysis and recommendations.

Running head: IT RISK ASSESSMENT FOR AZTEK
IT RISK ASSESSMENT FOR AZTEK
Name of the Student
Name of the University
Author note

1IT RISK ASSESSMENT FOR AZTEK
Executive summary
The aim of this report is t discuss abou the several risk factors present in a business. In this report
the present situation of Aztek regarding the risk factors has been discussed on the basis of a
project. Several risk factors and the main types of the risk factors are discussed in this report
along with the risk management methodologies. The main advantages of the risk mitigating
methods are also discussed in this report. Aztek is an Australian company which deals with
financial services. Several risk factors and the risk mitigations methods are discussed in this
report for the analysis of the system. It is concluded that new technologies and regulations should
be implemented in order to overcome the risk factors.
Table of Contents

2IT RISK ASSESSMENT FOR AZTEK
Introduction......................................................................................................................................3
A review of the project....................................................................................................................4
A review of the project impact on the current security posture of Aztec........................................5
Risk factors......................................................................................................................................7
Specially address Risks for Data Security from the viewpoint in the project.................................8
Mitigation of risk factors.................................................................................................................9
Conclusion.....................................................................................................................................13
References......................................................................................................................................15

3IT RISK ASSESSMENT FOR AZTEK
Introduction
In present day time of web and data innovation the significance of data is expanding step
by step and the measure of dangers are likewise expanding at the same time. It is essential to
keep the security of the data identified with the data and the hierarchical structure. Dangers can
be arranged from multiple points of view as indicated by its tendency sort of event. To manage
different sorts of dangers distinctive strategies are taken to secure the authoritative set up. There
are likewise numerous contrasts between the hazard and the vulnerabilities as both can harm the
hierarchical well being to a substantial degree. Some associations and governments have made a
considerable measure of well being controls which are helpful to influence the association to free
from hazard factors. The principle explanations for making the measures are to make a solid
boundary to the hierarchical hazard. Dangers can be sparing, digital and normal and every one of
these sorts of dangers require distinctive sorts of security safety measures. The risk is considered
as the variables which are in charge of making the framework helpless. The outline clarifies
every one of the parts of the factors related to several risk. It indicates distinctive sorts of dangers
with illustrations and furthermore it decides the level of the hazard factors which connotes the
conceivable vulnerabilities caused by a hazard factor. The hazard variables can be ordered in a
few ways. The first is on the premise of the place of event of the hazard factors. A few dangers
can happen inside associations and a few dangers can happen outside of the associations. Those
dangers which occur outside the association are known as the outer hazard factors and those
dangers factors which undertaking place inside the association are known as the inner hazard
factors.

4IT RISK ASSESSMENT FOR AZTEK
In this report the present situation of Aztek regarding the risk factors has been discussed
on the basis of this project. Aztek is an Australian company which deals with financial services.
Several risk factors and the risk mitigations methods are discussed in this report for the analysis
of the system.
A review of the project
There are numerous versatile saving money applications accessible today. Retail
managing an account and financier firms, for example, Bank of America and Fidelity
Investments have been utilizing versatile stages to offer applications that let clients remain avant-
garde on occasions, keep an eye on their portfolio possessions, and even start exchanges from
their cell phones (Poniszewska-Marańda 2014). Speculation administration firms have likewise
utilized the ascent of tablet gadgets as a chance to furnish their business powers with refreshed
documentation rapidly. The merging of versatile and money related industry where there are
various patterns that are empowering the union of the portable and the budgetary business. One
is the move towards Digital Wallet, which is an activity that enables clients to have computerized
cash in their cell phone or in the cloud. Another pattern originates from portable saving money,
which is picking up footing all through the world. Today, the lion's share of banks enable clients
to utilize their cell phones to check constrained data identified with their managing an account
yet this is certainly changing with expanding purchaser request, persistent arrival of new cell
phones and arrangement of safe and secure exchanges (Ross, Fielding and Louis 2014).
Changing security and advanced insurance requires a deliberate and gifted approach. We help
distinguish and relieve your environment by moderating danger, and examining advancing
consistence scenes to put the correct security and security controls set up, from client access
through information insurance for reinforcement and coherence necessities (Paton et al. 2014).

5IT RISK ASSESSMENT FOR AZTEK
We offer workshops, appraisals, engineering, outline, and incorporation benefits as a piece of
Hybrid IT, Cloud, grounds system, versatility, and IoT changes. Today, many people are grown
up claim a cell phone or the like. As the mindfulness for necessity of portability arrangement
keeps on developing among money related businesses, we will see new open doors, for both
monetary establishments and buyers.
There are also many regulations which should be followed in case of both risk assessment
and the risk management.
• Conduct a hazard evaluation for all work in the working environment.
• Take sensibly practicable measures to take out or lessen security and wellbeing dangers.
• Establish safe work methods if the dangers can't be disposed of.
• Specify the parts and obligations of people associated with the usage of hazard control
measures and safe work methodology.
• Keep records of hazard appraisal.
• Inform representatives of the idea of the dangers included and any hazard control
measures or safe work strategies actualized.
• Review or overhaul hazard evaluation.
A review of the project impact on the current security posture of Aztec
Changing security and advanced insurance requires a deliberate and gifted approach
(McNeil, Frey and Embrechts 2015). We help distinguish and relieve your environment by
moderating danger, and examining advancing consistence scenes to put the correct security and

6IT RISK ASSESSMENT FOR AZTEK
security controls set up, from client access through information insurance for reinforcement and
coherence necessities. We offer workshops, appraisals, engineering, outline, and incorporation
benefits as a piece of Hybrid IT, Cloud, grounds system, versatility, and IoT changes.
Consistence with ISO27001, ITIL or adherence to Cobit guidelines inside the IT capacity
may no longer alone be adequate to represent hazards over IT administrations, on the off chance
that they ever were (Lawrence et al. 2015).
Individuals' connection with innovation while outside work is a range not regularly
considered on hazard registers. For instance, the danger of staff sharing individual and
conceivably touchy organization data through long range informal communication locales may
incorporate data which can be utilized to trade off security on clients' corporate system accounts.
Huge volumes of information going from client buying propensities, to exchange
following logs have been developing inside corporate frameworks for a considerable length of
time, yet finished the following decade we will see a blast both the capacity and the open doors
for ventures to misuse this information (Howes et al. 2015). What has beforehand been a
differentiator will turn into an essential for survival. Information quality may progress toward
becoming as essential as item quality in figuring out which of the present undertakings are still
here in 2020.
The contradiction of hazard is opportunity and IT capacities which can viably deal with
their dangers will empower their organizations to fundamentally beat those organizations which
are put off by or essentially not up to the test (Kettl 2015). Organizations where IT feels engaged
to impact business basic leadership by exhibiting how business enablement can be driven by
viable administration of innovation dangers, will flourish enormously to the detriment of those

7IT RISK ASSESSMENT FOR AZTEK
organizations where obliviousness or dread of new or changing innovation chance ranges either
keeps them from moving into new zones, or results in disappointments when they endeavor to.
This is the ideal opportunity for IT pioneers to advance up and put themselves and their capacity
at the focal point of driving their business forward.
Risk factors
Consistence with ISO27001, ITIL or adherence to Cobit guidelines inside the IT capacity
may no longer alone be adequate to represent hazards over IT administrations, on the off chance
that they ever were (Hopkin 2017). Individuals' connection with innovation while outside work
is a range not regularly considered on hazard registers. For instance, the danger of staff sharing
individual and conceivably touchy organization data through long range informal communication
locales may incorporate data which can be utilized to trade off security on clients' corporate
system accounts. Huge volumes of information going from client buying propensities, to
exchange following logs have been developing inside corporate frameworks for a considerable
length of time, yet finished the following decade we will see a blast both the capacity and the
open doors for ventures to misuse this information. What has beforehand been a differentiator
will turn into an essential for survival. Information quality may progress toward becoming as
essential as item quality in figuring out which of the present undertakings are still here in 2020.
The contradiction of hazard is opportunity and IT capacities which can viably deal with their
dangers will empower their organizations to fundamentally beat those organizations which are
put off by or essentially not up to the test. Organizations where IT feels engaged to impact
business basic leadership by exhibiting how business enablement can be driven by viable
administration of innovation dangers, will flourish enormously to the detriment of those
organizations where obliviousness or dread of new or changing innovation chance ranges either

8IT RISK ASSESSMENT FOR AZTEK
keeps them from moving into new zones, or results in disappointments when they endeavour to
that. This is the ideal opportunity for IT pioneers to advance up and put themselves and their
capacity at the focal point of driving their business forward. Dangers can be sparing, digital and
normal and every one of these sorts of dangers require distinctive sorts of security safety
measures. The risk is considered as the variables which are in charge of making the framework
helpless. The outline clarifies every one of the parts of the factors related to several risk. It
indicates distinctive sorts of dangers with illustrations and furthermore it decides the level of the
hazard factors which connotes the conceivable vulnerabilities caused by a hazard factor. The
hazard variables can be ordered in a few ways. The first is on the premise of the place of event of
the hazard factors. A few dangers can happen inside associations and a few dangers can happen
outside of the associations. Those dangers which occur outside the association are known as the
outer hazard factors and those dangers factors which undertaking place inside the association are
known as the inner hazard factors.
Specially address Risks for Data Security from the viewpoint in the project
Presently the event of the hazard factors is likewise reliant upon the purposes for the
hazard factors. The hazard elements can be available due to some characteristic reasons and
unplanned reasons. The hazard components can likewise be available because of some deliberate
reasons made by human practices. Those dangers which are occurred because of the assault of
common reasons are called unplanned dangers and those dangers which are taken purposefully,
are called ponder hazard factors. Hacking, interruption and harms because of infections and
malware are called ponder chance elements. This hazard factor can be extremely hurtful for the
associations. If there should be an occurrence of inner hazard factors there are diverse sorts of
hazard factors. Those hazard elements can be of strategic hazard factors, corporate hazard

9IT RISK ASSESSMENT FOR AZTEK
factors, chance factor identified with property administration, lodging hazard factors and
furthermore the monetary hazard factors. All these hazard factors are created because of the
inside exercises of the association. The primary explanations for the inner hazard factors are
reliant on the authoritative usefulness and the rationale of the representatives. There are
additionally many variables like the authoritative profitability and the kind of administration
which the association works. It is vital to recognize the hazard factors which are produced from
the association. It is likewise critical to discover the purposes for the hazard factors and
furthermore the thought processes of the workers for which a portion of the inside hazard factors
are produced. The association ought to be stricter in making the hierarchical strength and
security for more grounded holding of the workers with the association. Outside hazard factors
are additionally essential and ought to be handled with the assistance of more grounded guard
instrument. The outside hazard variables can be of a few sorts. The outside hazard factors
contain dangers identified with cataclysmic event and undesirable specialized issues like loss of
web and the loss of power. Fundamental issue identified with the outside hazard is the danger of
digital assault. There are many cases found in which programmers have stolen bunches of
information from the database of a few associations managing data innovation. The outside
hazard factors contain subsidizing, administrative venture, notoriety, chance identified with
association and the natural changes which can make the usefulness of the association harmed to
various degree in view of the level of the hazard factors. Hazard administration is an imperative
piece of the capacities identified with the safeguards taken by the associations. In hazard
administration the primary concern is to decide the first issues identified with the hierarchical
hazard factors and to decide the required arrangement so as to defeat the hazard factors.

10IT RISK ASSESSMENT FOR AZTEK
Mitigation of risk factors
Hazard administration arranging should be a progressing exertion that can't stop
after a subjective hazard appraisal, or a Monte Carlo reproduction, or the setting of possibility
levels. Hazard administration incorporates front-end arranging of how real dangers will be
relieved and overseen once recognized (Bianco et al. 2017). Along these lines, hazard
moderation techniques and particular activity designs ought to be joined in the undertaking
execution design or hazard examinations is recently so much backdrop. It is now examined about
the dangers and the dangers which can be hurtful for the associations. The Victorian Protective
Data Security structure is the principle highlight of the directions which has given safeguards and
standard conventions against all the conceivable hazard factors which can be unsafe regarding
influencing the associations more to secure. The essential advance of making the association
further developed in security is to make the demonstrations and conventions in regards to people
in general data wellbeing and the defensive information security. For this situation the
fundamental highlights are composed in such a path along these lines, to the point that the laws
and the controls can be executed appropriately. The primary benchmarks take after a few
strategies to conquer the hierarchical structure which is essential if there should be an occurrence
of influencing the associations more to secure and solid. These measures are made with a
specific end goal to spare the four areas which are data, ICT, work force and the physical
security from different hazard factors. Each standard contain four conventions which are
likewise actualized with persistent alterations for better reaction. Principles and the data ought to
be dealt with preferred duty over the official resources. Data security and the ICT security ought
to be given most astounding need. This infers the compliance of the security by reflecting to the
association and the administrations. A few significances are given to chance administration and

11IT RISK ASSESSMENT FOR AZTEK
the data esteem. Consistent change is a critical component of a few governments which tells
around four key variables and those are design, do, check and act. With the assistance of these
four factors the hazard examination and administration can be more powerful as far as
influencing the framework more to secure.
Describe the underlying drivers of dangers that have been distinguished and measured in
before periods of the hazard administration process (Davies 2014). Distinguish elective
moderation systems, techniques, and devices for each significant hazard. Evaluate and organize
relief choices. Select and confer the assets required for particular hazard relief choices.
Despite the fact that hazard alleviation designs might be created in detail and executed by
contractual workers, the proprietor's program and undertaking administration ought to create
principles for a reliable hazard moderation arranging process. Proprietors ought to have free,
unprejudiced outside specialists audit the undertaking's danger relief designs before definite
endorsement (Cole et al. 2013). This ought to be done before finishing the venture plan or
designating stores for development. Hazard alleviation arranging should proceed past the finish
of the undertaking by catching information and lessons discovered that can profit future
activities.
A few dangers, once recognized, can promptly be dispensed with or decreased.
Nonetheless, most dangers are substantially harder to relieve, especially high-affect, low-
likelihood dangers. In this way, hazard relief and administration should be long haul endeavours
by venture chiefs all through the task.
Be that as it may, when a venture has some vulnerability, a full-speed-ahead approach
may not be ideal. In such ventures, scope changes and iterative reusing of the plan are the