Create your own Information Assurance Management System. (IMMA or your HOME) CRITERIA EXAMPLE 1. SCOPE (Where is the part that you want to protect the information?) 2. DESCRIPTION (Why is there a need to secure the information?) 3. RISK ASSESSMENT (What will happen if the information where exposed to unauthorize individual or party?) (What is the effect to the company in securing the information/assets?) RISK MITIGATION PLAN (How will you solve the involved risks?) 5. CONTROL OBJECTIVES (What will be controlled, is it the managerial, technical or operational, based on your scope?) 6. SECURITY CONTROLS (How will you secure the identified controls?) (Identify the responsible person/department for the implementation of security?)