Refer to an organization with which you are familiar or can research in substantial detail regarding the tools that are used to mitigate risk in the organization’s information security

Risk Mitigation and the Organization

Refer to an organization with which you are familiar or can research in substantial detail regarding the tools that are used to mitigate risk in the organization’s information security.

• What tools are used by the organization in mitigating risk?
• Why were the tools chosen?
• Do the tools chosen comply with the organization’s security policies with regard to risk mitigation?
• From the perspective of the organization’s INFOSEC personnel, are the tools likely to be successful in risk mitigation? Why?