Case Study – enterprise risk management practices

I’m working on a Writing exercise and need support.

Read the attached article:

• https://www.mckinsey.com/business-functions/risk/our-insights/enterprise-risk-management-practices-where-is-the-evidence

GUIDELINES FOR WRITING A CASE STUDY

A case study analysis requires you to investigate a problem, examine the alternative solutions, and propose the most effective solution using supporting evidence. Your submission should be no more than 2 pages and needs to adhere to APA formatting for spacing and citations. Include a title page, your case study (1-2 pages), and reference page.

Preparing the Case

Before you begin writing, follow these guidelines to help you prepare and understand the case study:

1. Read and examine the case thoroughly
   • Take notes, highlight relevant facts, underline key problems.
2. Focus your analysis
   • Identify two to three key problems
   • Why do they exist?
   • How do they impact the information security field?
   • Who is responsible for them?
3. Uncover possible solutions
   • Review course readings, discussions, outside research, and your experience.
4. Select the best solution
   • Consider strong supporting evidence, pros, and cons: is this solution realistic

Drafting the Case

Once you have gathered the necessary information, a draft of your analysis should include these sections:

1. Introduction
   • Identify the key problems and issues in the case study.
   • Formulate and include a thesis statement, summarizing the outcome of your analysis in 1–2 sentences.
2. Background
   • Set the scene: background information, relevant facts, and the most important issues.
3. Alternatives
   • Outline possible alternatives (not necessarily all of them)
   • Why are alternatives not possible at this time (if not possible)?
4. Proposed Solution
   • Provide one specific and realistic solution
   • Explain why this solution was chosen
   • Support this solution with solid evidence
5. Recommendations
   • Determine and discuss specific strategies for accomplishing the proposed solution.
   • If applicable, recommend further action to resolve some of the issues
   • What should be done and who should do it?