Upon review of the current risk management plan, the following threats were identified:

• Loss of company data due to hardware being removed from production systems
• Loss of company information on lost or stolen company-owned assets, such as mobile devices and laptops
• Loss of customers due to production outages caused by various events, such as natural disasters, change management, unstable software, and so on
• Internet threats due to company products being accessible on the Internet
• Insider threats
• Changes in regulatory landscape that may impact operations

Senior management at Health Network allocated funds to support a risk mitigation plan. They have requested that the risk manager and team create a plan in response to the deliverables.

The risk mitigation plan should address the identified threats described in the scenario for this project, as well as any new threats that may have been discovered during the risk assessment. You have been assigned to develop a draft of this new plan.