As the team leader for Phoenix Security Services$$ SureMarket account, you continue your SOX assessment of compliance using the NIST RMF as described in NIST SP $800-37$:

Step $1$: Categorize Information Systems

Step $2$: Select Security Controls

Step $3$: Implement Security Controls

Step $4$: Assess Security Controls

Step $5$: Authorize Information System

Step $6$: Monitor Security Controls

Research your documentation for Steps $1$ through $4.$

Your next task is to complete Step $5$ of the NIST RMF process by developing a risk mitigation plan and presenting your assessments to the SureMarket senior leadership in order to gain authorization for continuing operations of the $5$ SureMarket IT Systems.

Part A

To prepare your risk mitigation plan, complete the $2-$ to$-3-$page SureMarket Risk Mitigation Plan template using the results from Steps $3$ and $4$ of the NIST RMF process, along with your recommended mitigation actions, estimated completion date, and milestones. This information will be summarized in your presentation to senior leadership for approval of the mitigation plan in Part B$.$

Part B

Create a media$-$rich, $10-$ to $12-$slide Microsoft PowerPoint presentation or an infographic using an infographic maker, such as Piktochart$,$ Venngage$,$ or Canva$,$ to the SureMarket senior leadership that includes the following:

Summarize the $5$ IT systems, including their respective categorization $($Low$,$ Medium, High$)$

Summarize each IT system$$s vulnerabilities

Summarize each IT system$$s risks using the $5$ x $5$ Risk Matrix from NIST SP $800-30$

Summarize how each of the risks can impact SureMarket business objectives and SOX compliance if the risks are not mitigated

Document your recommended mitigation plan in priority order

Include narration in the notes section of each slide

Note: You will use this week$$s assignment to help you complete the Week $5$ assignment.

Submit your completed template and presentation or infographic $($if you made one$)$ saved as a PDF$.$

Resources

Center for Writing Excellence

Reference and Citation Generator

Grammar and Writing Guides