Case Study: Alibaba and the 40,000 Thieves
Notes:
Your answers should reflect your competency of each element:
1. Establish risk context
2. Identify risk
3. Analyse risk
4. Select and implement treatments
This case study is to be presented as a report, with
(a) a title page
(b) a content page
(c) introduction page
(d) in your report you are answering the following questions with proper headings
and appropriate diagrams
(e) Question 23 will be your conclusion page for your report
(f) Then final page is your reference page (Referencing Guide can be found in Moodle)
The questions to be addressed in your report in
egards to Alibaba:
1. What part/s of the legal framework will impact on this risk?
2. What standard applies presently?
3. What areas does your risk address? (e.g. commercial relationships)
4. There are different types of risk, including legal, financial and safety risk. Which one/s do you
think apply in your case?
5. Who is responsible for this risk?
6. Who are your external and internal stakeholders? What are their objectives?
7. Review any political, legal, social, economic or technological changes that will influence you.
Create a SWOT analysis of this.
8. Outline how critical success factors will influence this case.
9. Using the stakeholders identified earlier, identify how you would communicate and consult
with each party changes?
10. What other research would you need to do in this case?
In this next section, you may choose to complete a risk assessment form internal to your
organisation if you wish.
11. Assess the risk
12. What is the likelihood of this problem arising again?
13. What are the possible consequences of this risk?
14. Evaluate and prioritise treatment for the risks?
15. What risk priority would you consider?
16. What opportunities do you think there are in your case? How can these opportunities be used?
17. Based on your assessment and research, list the ways in which you can minimise the risk.
Choose the risk option that you believe is co
ect. Which one is it?
18. Briefly explain the risk action plan for this assessment.
19. What documentation and records do you think you will need to maintain and file before,
during and after the action plan is implemented?
20. Why do you need to keep documentation?
21. You need to be able to implement the action plan. What do you need to do? Briefly outline
how you will implement each step.
22. How often will you communicate with stakeholders?
23. How will you evaluate your case? Develop a tool that you can use to perform this task.