Due Diligence Review of an organisation or project

This assignment has two parts. If possible workshop the process with colleagues, or as a minimum consult with them, on at least the vulnerability assessment. Both parts could be researched as two workshops as presented and discussed in the lecture week 4.

1. Vulnerability Assessment:

- Apply the Vulnerability Assessment technique to your enterprise (or part thereof), or to a business, contract or project of interest to you. If you are a full time student, choose a business or project with which you would like to be personally involved or need to achieve.

- In doing so:

- clearly document the assets (or critical success factors) and the reason why these were selected
- document the threats and the method of selection of these threats

- determine and present the critical vulnerabilities

2. Precautionary Analysis:

Using the Vulnerability Assessment undertaken in part 1 above, develop precautionary recommendations for the assessed vulnerabilities.

In doing so:
- You may use a technique described in the lectures or one sourced from elsewhere.

- You do not need to describe the technique used in detail but you must provide sufficient outline to justify the selection for this assessment.

- The purpose is to demonstrate that all reasonable practical precautions are in place based on the balance of the significance of the risk vs the effort required to reduce it.

The assignment is to comprise circa 2000 words plus supporting information/diagrams as required. However, there is no penalty for submitting a (reasonably) larger analysis.

Anything larger must be interesting and relevant to the assignment.

The final outcome could be a corporate or project risk profile, and ranked investment action list for the selected organisation, business unit or project.