IT Risk Assessment Plan
•
1 like•1,197 views
This document outlines a proposed one-month pilot project to develop an online platform for conducting IT risk assessments. Key points include: - The platform would provide a standardized, automated way to conduct mandatory annual IT risk assessments required by various compliance standards. - It would offer a more engaging "game-like" visual experience compared to traditional Excel-based methods. - The platform could be built using HTML5, PHP and Javascript in around 15 days, with marketing being the biggest challenge. - With 1000 customers paying $100 each per year, the project could generate $100,000 in annual revenue, scaling to over $1 million with 10,000 customers.
Recommended
More Related Content
What's hot
What's hot (11)
Similar to IT Risk Assessment Plan
Similar to IT Risk Assessment Plan (20)
Recently uploaded
Recently uploaded (20)
IT Risk Assessment Plan
- 1. IT Risk Assessment Project Project Plan Document Introductory Project Intricap, LLC One month Pilot Project September 2013
- 2. Core Value Proposition Any company with an IT organization has to perform IT Risk Assessments mandatorily as part of various compliances. This means every company worth its salt. Needs to be done annually It is boring for IT and IT security managers. IT Risk Assessments are done one- on-one today A mass customization solution through Internet and Technology will find instant adoption.
- 3. Competition None Most of it is done internally at present, or through consultants done one at a time.
- 4. What it takes to do IT Risk Assessments today You have to identify all critical ITEMS in IT infrastructure: Computers, Servers, Switches, Networks, Locations Identify THREATS that can do harm to each of them. Figure out how VULNERABLE each item is to each threat For each vulnerable item, determine the LIKELIHOOD of getting effected. Given a likelihood of getting affected, what will be the IMPACT on each item. Given all of above, what is the RISK to each item. Document and Report
- 5. That seems complicated No. Most of the ratings are numbers from 1 to 5, and all you need is to multiply and add those numbers to achieve Risk Ratings
- 6. Is there a standard to comply There are 3 Industry known standards NIST SP800-30 ISO 27005 OCTAVE
- 7. That’s lot of jargon IT Industry needs jargon to look smart. Come on, admit it. All of us boast a little. It is just repackaging the same old wine, reordering sequences, and uses slightly different phrases
- 8. So what is your offering We will offer NIST SP800- 30 compliant Risk Assessments online through technology platform.
- 9. Pricing !!!!! We are working on pricing. Nothing is fixed yet
- 10. How much would be the possible charges ? We really want a fast adoption on this one. We have not decided the numbers yet, but we will take it through a price discovery mechanism.
- 11. What else is your value add ? For the first time ever, we will offer VISUAL RISK assessments. All present Risk Assessments are excel based number assignment. Boring Stuff. We will make it exciting. Like visuals running, and playing a game. At the end of the game, your Risk Assessment is done.
- 12. Is making it lot of work NO. In god’s name NOT. You cannot believe how easy it is to build cool visuals using this totally open technology HTML5.
- 13. So Just HTML5 And a bit of PHP and Javascript. We need to create Word reports, so we will use some third party tools for it.
- 14. How much time to build ? Maybe 15 days of work. Maybe less. Building it is not that hard work. MARKETING it is.
- 15. MARKETING Yes. We have to reach all IT, and IT Security Managers all over. Then get them to try it. That has seemed to be a toadfull of work elsewhere.
- 16. So !!!!!! So out of box marketing techniques would be the most crucial factor in the success of this project. Its all about MARKETING
- 17. OK, and what are the returns ? At 100 USD per customer paying, if 1000 customers sign up, that is USD 100,000 per year. With 10,000 customers, it is 1 Million USD per year. The world market is 100,000 customers. Remember it is PER YEAR, not one time
- 18. That’s not bad for one month of work I told you so.
- 19. And regular costs ? After initial heavy effort in building and marketing has been done, it will not take more than 2 people to run the whole show. This will be a profitable project.
- 20. Future ~!! Once a relationship is built with all IT Managers, and if they kinda like you. Then there are more things to be done ;)
- 21. OK I am interested All rights: INTRICAP, LLC rohit@intricap.com Prepared on a bus from Monterrey to Mexico City, 1st September, 2013 . Hurrah Internet on buses