In this assignment, you will play the role of a security consultant. Your client is a fictional organisation –
IISC consulting company. The client has requested you to perform a security risk assessment of the
organisation. You are expected to deliver a formal written report which will be presented to the board.
It is required that the information security risk assessment is performed in accordance with NIST SP
800-30 Rev.1 – Guide for Conducting Risk Assessments
https://csrc.nist.gov/publications/detail/sp/800-30/rev-1/final
Based on the background information about the company given in Appendix 1, perform the required
risk assessment and submit a written report. Note that you may make an assumption on information
required to complete the task if it is not described in Appendix 1.