Risk Assessment Report: Evaluating Risks for Riot Games Projects

This report presents a risk assessment for Riot Games, examining potential risks like cost overruns, project delays, and quality issues. It applies the NIST Cybersecurity Framework to identify, assess, and mitigate risks. The assessment includes an analysis of risk identification, assessment methods, and mitigation strategies, such as cost contingency reserves and adherence to PCI DSS standards. The report outlines controls to be implemented, tasks to be done, and compensating controls to improve critical infrastructure cybersecurity, along with a likelihood and impact analysis of various risks. It offers a detailed overview of project management challenges within game development and suggests proactive measures to ensure successful project outcomes. The report references relevant academic sources to support its findings.

Running Head: RIOT GAMES RISK ASSESSMENT
Riot Games Risk Assessment
Name of the Student
Name of the University
Author note

1RIOT GAMES RISK ASSESSMENT
Table of Contents
1. Risk Assessment..........................................................................................................................2
2. Framework for Improvement of Critical Infrastructure Cyber Security.....................................3
2.1 Controls to be implemented...................................................................................................3
2.2 Tasks to be done....................................................................................................................3
2.3 Compensating Controls.........................................................................................................3
2.4 Likelihood and Impacts.........................................................................................................4
References........................................................................................................................................5

2RIOT GAMES RISK ASSESSMENT
1. Risk Assessment
The NIST Cyber Security Framework could be applicable for performing risk assessment
over Riot Games in order to understand the various scenarios of risk, evaluate them and thus take
certain steps based on mitigating them.
1. Identification of risks – The different risks identified at Riot Games are cost overruns,
cancelled projects due to unexpected reasons, delay in project delivery and quality issues.
2. Assessment of risks – The risks could be assessed as:
a. Understanding the current scenario and looking forward towards future project
planning.
b. Determining whether an agreement has been signed before the start of project.
c. Schedule should be checked continuously.
d. Quality should be assessed in a continuous manner by project supervisor.
3. Mitigation Strategies – The mitigation approach towards risks are:
a. The project manager should continuously check the current scenario of costs and thus
discuss them with the project sponsor (Ahiaga-Dagbui & Smith, 2014).
b. Agreement should be signed before the start of project and any project cancellation
would lead to full payment to the company.

3RIOT GAMES RISK ASSESSMENT
2. Framework for Improvement of Critical Infrastructure Cyber Security
2.1 Controls to be implemented
In order to prevent the cost overruns within the game development projects, the project
supervisor should carefully understand the scenarios that would lead to rise of costs for the
project. The project manager should ensure that each of the project tasks are being completed
according to proper scheduled timings. This would ensure the proper delivery of project within
proper time.
2.2 Tasks to be done
The certain tasks that need to be done are:
1. Budget should be evaluated by the project manager and the detailed list should be
updated to the client and the company itself.
2. Ensuring that the activities are scheduled. The project should be delivered in a timely
manner.
3. Continuously checking over quality of project.
2.3 Compensating Controls
1. Cost Contingency Reserve (CCR) could be used for determining Earned Value
Management within the project.
2. The project should be compliant with PCI DSS standards (Wilhelmsson et al., 2017).
3. The Risk Control Self-Assessment (RCSA) should be used for establishing framework
based on measuring effectiveness.

4RIOT GAMES RISK ASSESSMENT
2.4 Likelihood and Impacts
Number Risk Cell references
R1 Technical Issue C3
R2 Financial Issue D4
R3 Deadline Issue B4
R4 Quality Issue A5
Likelihood
Risk Identification D (Certain) C (Likely) B (Moderate) A (Unlikely)
Impact
5 (Fatal) R4
4 (Major) R2 R3
3 (Lost Time) R1
2 (Minor)
1 (Trivial)

5RIOT GAMES RISK ASSESSMENT
References
Ahiaga-Dagbui, D. D., & Smith, S. D. (2014). Rethinking construction cost overruns: cognition,
learning and estimation. Journal of Financial Management of Property and
Construction, 19(1), 38-54.
Wilhelmsson, U., Engström, H., Brusk, J., & Östblad, P. A. (2017). Inclusive game design
facilitating shared gaming experience. Journal of Computing in Higher Education, 29(3),
574-598.