Information Security Policy Paper

3. In relation to your current organisation (or one that you are familiar with), outline the role that customer service plays in this organisation and its industry as a whole.

Everyone in a managerial role is responsible for establishing the communication needs of the service users, providing appropriate support and ensuring any equipment needed to communicate is available. The Managerial role is to empower and promote the rights of every person taking into account individual needs, wants and rights.

* Review the results of a qualitative Business Impact Analysis (BIA) for a mock organization

To understand the role(s) of a Security Manager, a person must know what security is and what it means to an organization. According to Ortmeier, “security may be defined as a public or private service-related activity that provides personnel, equipment, and creates policies and procedures designed to prevent or reduce losses. These losses, caused by criminal action as well as by noncriminal events resulting from human error, emergencies, man-made and natural disasters, and business intelligence collection by competitors”. (2009).

Information security analysts serve an important role in the modern digital workplace. The main function of an information security analyst is to protect computer systems against security threats such as cyber-attacks. This is becoming an imperative career as

Due to the past high frequency of theft and the ramifications it will have on the business, security measures and processes have been adopted to prevent such theft which would lead to financial loss. The current security system in casinos, use both physical security personnel along with technology to reinforce any weak spots in the security system. Casinos have different designs and conditions for various venues. Card rooms have the most security problems with dealers handling the money with minimal supervision from floor managers, but with the “eye in the sky” surveillance. Games in the pit, such as blackjack, have floor persons constantly monitoring the dealers and the games. Craps, takes it further, by having the dealers watched by the “box person” who is watched by the floor person. All are scrutinized by the “eye in the sky.” The gaming industry of today is able to have a competitive advantage and make the most with a limited labor force by having strategy the includes automation which is used to examine for standardized, auditable, and justifiable

The CIO role in the company needs to be clearly identified along with accountabilities and objectives for him and his organization, including preventing security breaches.

This is a case of my aunty who was a domestic house wife. One day on her way back from shopping her purse got stolen. She carried all her bank cards together with the personal identification numbers for her bank cards in her purse as she was not that educated and used to forget the PIN. She did not realize that her purse was stolen until she reached home. Same time she rushed back to town to get the bank card blocked but it was already late, the fraudster had withdrawn around $700.00 from the ATM. In this particular case my aunt was vulnerable as she lost $700. The controls/measures/practices to protect personal data in this caseare to memorize the

The Chief Operations Officer (COO) and the Chief Executive Officer (CEO) are the responsible individuals, which must make the appropriate decisions in order to protect the company’s wealth. As the COO, responsibilities include supervision of the three different product lines that

A good policy should be concerned with providing data confidentiality, integrity, availability, resource protections, and also should be audited periodically. An example of policy is to send out critical data via the Internet, the data must be encrypted. The second part is procedures: which are a detail of the steps and documentations that explain how a particular function or job should be done. For instance, a detail instruction which tells how a particular program should be installed. The last part is the awareness and training which is very critical to take into consideration. Thus, all employees should be trained and aware of general security by providing them with security training whenever it is necessary and educate them about cyber security.

The basic system of just about every casino is that of the tables (including Roulette, Blackjack and Craps) filling the center of the room with computerized

The organization's CEO should play a major role in defining the scope and expectations as well as devising the measures for evaluation of the system performance to ensure it meets the demands of the organization as a whole. The CEO also plays a major role in ensuring the training of staff as well as the major communications of the progress of the system. System users play major roles in identifying major tasks and activities as well as performing workflow analysis in defining the workflows of the system. The IT department is responsible for installing hardware, software, and network infracture, designing a disaster recovery plan, and observing and evaluating the operations of the system. The IT department is also responsible for converting data, setting up databases, and reprogramming any parts that need to be

The first challenge is in the user domain. We must train our employees to ensure they are aware of the security policies. Employees need to understand the policies and how it aligns with business goals and mission statement. Another challenge in this area is handling of sensitive information and non-public customer identifying information. In order to be compliant we must have a training program in place that is in line with the regulations.

CISO stands for chief information Security Officer.CISO play a very vital role in a large companies and enterprise. Generally he handle all the security issue like developing, maintenance and some security related problems that decrease the organisation hazard. He has the highest designation in a company.In other word we can say that he do look after of the security issue. Which will protect the companies highly confidential information.Highly confidential think can be any this like information store in the server, Recipes of item like food, drink and so on. He is also establish the policies and procedure for the employees of the companies. there are some other responsibilities follow by CISO:-

A threat agent is the facilitator of an attack however; a threat is a constant danger to an asset.