Explain, what main functions under an InfoSec program would you recommend a smaller organisation with three full time staff and two or three part-time roles from other parts of the business? Specify for InfoSec department and other departments. Specify the functions that would be performed by the different departments and indicate if any functions could be outsourced. Justify your allocation of functions.

Explain, what main functions under an InfoSec program would you recommend a smaller organisation with three full time staff and two or three part-time roles from other parts of the business? Specify for InfoSec department and other departments. Specify the functions that would be performed by the different departments and indicate if any functions could be outsourced. Justify your allocation of functions.

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter3: Governance And Strategic Planning For Security

Section: Chapter Questions

Problem 3E

See similar textbooks

Similar questions

For a small business with three full-time workers and two or three part-time employees, what core infosec tasks would you suggest? Include departments such as InfoSec and others. List the departments responsible for each task and mention if any of them may be outsourced. Justify the function you chose.
What significant InfoSec tasks would you recommend for a smaller organisation with three full-time and two or three part-time roles? Departments include InfoSec. List department functions and if any may be outsourced. Function assignment.
Your firm wishes to develop an information system for its operations. You and the management in your information systems department agree that it be outsourced. What could be the reasons for this decision? Explain your answer, illustrating it with examples.
Audits and responsibility may help refine the layout of an information technology system. If at all feasible, please provide an example.
What developments are taking place in the sector? Conduct research on an issue that is of interest to you and that is presently in the news, and then describe how this topic is relevant to management information systems.
In the event that information centres wish to automate some or all of their operations, it is crucial that they have a comprehensive plan. Are you in agreement or disagreement? Justify your position.
2. Respond to the following in a minimum of 175 words: Consider an organization that you believe does not conduct adequate strategic IS planning. What are at least two reasons why this type of planning might not be done appropriately or at all? What are the implications of this inadequate strategic IS planning? As an IT professional, how would you explain the importance of strategic IS planning to identify and select IS projects?
Knowing that more than 70% of its IT employees will be eligible for retirement over the next three years, a major city in the United States quickly developed a strategy to hire fresh IT specialists and combine them with seasoned veterans. Organizational IT experience was crucial, since their IT systems were almost entirely constructed in-house over a 20-year period, and such talents were unavailable on the open market. Is this a hint that more work needs to be done on crisis management and backup plans? Perhaps there was a previous paper or strategy that should have dealt with this problem.
In this section, we'll go through the most essential information system issues and the best ways to address them in your business.