IT Risk Reduction Plan Templates

Armed with the risk reduction plan you may have to develop a budget if you don't already have one or if the one you do have is too small. Let's assume that as the new director of information security you have managed to acquire a small staff of three or four personnel. If you do not have staff then you will have to consider this in your budget calculations. You will have to matrix in people from other parts of the company, hire staff, or outsource the work. In either case you must determine the level of effort required for each project on the risk remediation plan in order to determine your budgetary requirements. Let's further assume that your budget is sufficiently large enough to begin tackling some of the projects on your risk reduction plan.