Describe what key duties you would include in an information security program for a smaller organization with three full-time employees and two or three part-time employees from other departments. Add Information Security and other pertinent departments. List each department's tasks and which may be outsourced. Justify function allocation

Describe what key duties you would include in an information security program for a smaller organization with three full-time employees and two or three part-time employees from other departments. Add Information Security and other pertinent departments. List each department's tasks and which may be outsourced. Justify function allocation

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter10: Planning For Contingencies

Section: Chapter Questions

Problem 2E

See similar textbooks

Similar questions

Describe what key duties an information security programme for a smaller business with three full-time employees and two or three part-time workers from other departments should cover. Add Information Security and other pertinent departments. List each department's tasks and which may be outsourced. Justify function allocation.
Describe the requirement process used in the cybersecurity/security area of Raytheon. List three requirement artifacts produced by this process. Use diagrams if needed and explain
Give an example of a small business with three full-time employees and two or three part-time employees from other departments, and explain what essential activities you would propose include in an information security program for that business. Provide information for the Information Security division and any others that may be involved. Define the roles of each department and indicate which tasks may be delegated to outside vendors. Explain the rationale for assigning these responsibilities, please.
Information security program development and implementation is not a simple process, but it is an absolutely essential and on-going process; particularly if your organization is responsible for maintaining the integrity, availability, and confidentiality of customer information or business-critical data. Explain TWO approaches with the help of a valid diagram to Information Security Implementation in any organization.
C. List the components of PKI, then describe each component and its function. What are certification and accreditation when applied to information systems security management? List and describe at least two certification or accreditation processes. You've been hired by an investment company with 500 employees to serve as their Information Systems Security Manager. Your first task from the Chief Information Officer is to write a series of policies and procedures as the company has nothing in place. Where is a good place to start your research? List at least 3 policies and procedures that you would work on first and explain why these three should be considered early. Recommend a password policy. If the C.I.A. triangle is incomplete, why is it so commonly used in security? Explain what value an automated asset inventory system has for the risk identification process?
Principles of Information Security Q : Explain how an organization’s information security blueprint becomes a project plan?
Explain the systems support and security phase
Put information security and upgrade requirements on one slide.
List and briefly describe common challenges in system management.
What key InfoSec responsibilities would you propose for a smaller company with three full-time and two or three part-time roles? Information security. List outsourced department functions. Function assignment.
List and describe system requirements, including outputs, inputs, processes, performance, and controls
Define the term "system management" in the context of information technology, and list the key responsibilities of a system administrator.