Managing Risk in Information Systems, 3rd Edition

Implementing a Risk Mitigation Plan

The next step is to implement the risk mitigation plan, which is when the countermeasures are put into place. The two primary goals when implementing a risk mitigation plan are:

• Staying within budget
• Staying on schedule

Any project will have unknowns and surprises, and this is especially true for complex countermeasures. However, advance planning will reduce these unknowns to a minimum. Without adequate planning, the project may go overbudget or be frequently delayed.

Either problem could cause management to change its mind on the value of the countermeasure. If it costs too much or takes too long to implement, management will question the value of the countermeasure.

Staying Within Budget

In the example ...