Demonstrate how compensating controls can ensure the non-compliant system can continue to operate within the secured and compliant environment.

Organizational Risk Assessment

In this assignment you will be conducting a risk assessment. This will not be a technical risk assessment, but an assessment of your hypothetical organization/business. For your organization/business, take the NIST Cybersecurity Framework controls and reduce them to system configuration requirements and system test cases with pass/fail criteria. Refer to the “Framework for Improving Critical Infrastructure Cybersecurity,” located within the Course Materials. Then, include the following in a report:

1. Describe when some controls cannot be implemented (such as on a personal laptop).
2. Explain what is to be done in each case identified above to compensate for controls that cannot be implemented (e.g., create an identification authentication scheme).
3. Demonstrate how compensating controls can ensure the non-compliant system can continue to operate within the secured and compliant environment.
4. Discern the likelihood of a cybersecurity breach within the compliant environment and the impact it might have on the organization (make sure to consider emerging risks, threats, and vulnerability).

Please note that questions #8 and #9 will likely be quite challenging. I want you to discuss challenges and strategies in the discussion forum. Don’t just give up the answers to other students if you figure out how to solve the problems, but try to offer insights and answer other students’ questions when you can. I’ll be in on the discussion as well. The point is for each of you to learn about R. The best way to get there is to encounter some challenges and collaborate to resolve them. I look at questions #8 and #9 as opportunities to learn more about R, not ways for me to count off points. I’m interested in the outcome.

Of course, you will need a functioning R implementation to do this exercise. See the discussion forum for more details if you need to acquire R.

APA style is not required, but solid academic writing is expected.