Chapter 11, Problem 5E

Explanation of Solution

 The Office of Campus Information Security Risk Assessment Process:

• Letter of Engagement
  • It is the agreement between departments of information security and information management or service.
  • It includes the following:
    • Scope of the assessment
    • Assessment standards and tools used in management
    • Schedule of the assessment
    • Responsibilities of the individuals
    • Content of the final report
• Conduct the assessment
  • It performs the comparison between the current environment service and industry standard.
  • It includes the following:
    • Completing the self-assessment...