Your group will assume the role of an IT Risk Assessment Team, and complete a risk assessment of a fictional healthcare company called CareNet.

In addition to the need for a justifiable business case, as the IT Risk Assessment Team at CareNet, your team's role is to identify, assess, and report on potential risks for one of the projects listed below. Your team's thorough assessment and report will be used by stakeholders and leadership to make a determination on the project to take forward.

CareNet executives have identified a portfolio of strategic initiatives being considered to meet the organization's goals. The portfolio includes projects such as:

• Allowing employees to bring their own devices (e.g., laptops, tablets, and mobile phones) into the workplace to be used as their main or sole devices in achieving their work tasks.
• Moving from an all on-site work environment to 100% remote working.
• Merging technologies of two acquired companies with parent company technologies.
• Integrating work processes for customer service departments of newly merged companies.

Your team's report must meet the following criteria:

• Executive Summary at the beginning of the report which provides a clear statement of the project being assessed, and an overview of your recommendations to CareNet management as to the merits of the project, based on your risk assessment.
• Include:
  • Risk identification
  • Risk categorization
  • Risk probability and impact matrix
  • Reporting format
  • Risk tracking
• Convincing arguments for management as to why the project should or should not be chosen.