Developing the corporate strategy for information security

Assignment Help Basic Computer Science
Reference no: EM13951167

Assignment 1: Developing the Corporate Strategy for Information Security

Imagine that you are working for a startup technology organization that has had overnight success. The organization's immediate growth requires for it to formulate a corporate strategy for information security. You have been recruited to serve as part of a team that will develop this strategy.

As part of the Information Security Strategy development, you are required to define specific Information Technology Security roles that will optimize and secure the organization's data assets.
Review the following Website titled "Information Technology (IT) Security Essential Body of Knowledge (EBK): A Competency and Functional Frame-work for IT Security Workforce Development" for additional information necessary to complete this assignment.

Write a five to seven (5-7) page paper in which you do the following, based on the scenario described below:

1. The Chief Information Security Officer (CISO) is responsible for several functions within an organization.

a. Examine three (3) specific functions a CISO and provide examples of when a CISO would execute these functions within the
b. Specify at least three (3) competencies that the CISO could perform using the provided Website titled, " Information Technology
(IT) Security Essential Body of Knowledge (EBK): A Competency and Functional Frame-work for IT Security Workforce

2. The Chief Information Officer (CIO) is responsible for several accountability functions within an organization:
a. Identify at least four (4) functions of the CIO using the EBK as a guide. Provide examples of how the CIO would execute these
functions within an organization.
b. Classify at least two (2) security assurances that could be achieved by the CIO developing a formal security awareness, training,
and educational program.
c. Suggest methods, processes, or technologies that can be used by the CIO to certify the security functions and data assets of an
organization on a day-to-day basis.

3. Describe how the digital forensics function complements the overall security efforts of the organization.

4. Evaluate the operational duties of digital forensic personnel and how these help qualify the integrity of forensic investigations within the enterprise and industry.

5. List at least three (3) technical resources available to the digital forensics professional to perform forensic audits and investigations.

6. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.

Your assignment must follow these formatting requirements:

• Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.
• Include a cover page containing the title of the assignment, the student's name, the professor's name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.
The specific course learning outcomes associated with this assignment are:
• Describe and apply the 14 areas of common practice in the Department of Homeland Security (DHS) Essential Body of Knowledge.
• Describe best practices in cybersecurity.
• Identify and analyze the role of the Chief Information Officer, Information Security Officer, and IT Security Compliance Officer in the context of cybersecurity.
• Compare and contrast the functional roles of an organization in the context of cybersecurity.
• Describe the corollary roles of security in an enterprise.
• Evaluate the ethical concerns inherent in cybersecurity and how these concerns affect organizational policies.
• Use technology and information resources to research issues in cybersecurity.
• Write clearly and concisely about topics associated with cybersecurity using proper writing mechanics and technical style conventions.

Reference no: EM13951167

What is the average number of guesses needed

What are the best strategies for both players in the adversarial guess a number game where chooser's goal is to pick a starting number that maximizes the number of guesses t

Phone number without any hyphens or spaces

Prints a message to the screen asking the user to enter a ten digit phone number without any hyphens or spaces. The user is expected to enter something like 6519625554 You sho

Find the horizontal component of the force

Because of the wind, after a few diameters downstream the exhaust flows in a horizontal direction with the speed of the wind, 15 ft/s. Determine the horizontal component of

Main purposes of innovation portfolio management

Discuss what the main purposes of innovation portfolio management are. In your answer explain how creativity and innovation differ. Provide examples to illustrate your answe

Technology and organizational behavior issues

You are to write a three to four (3-4) page paper that answers the following: During the 1970s, the U.S. Air Force Program for Integrated Computer-Aided Manufacturing (ICAM)

Percentage of green beads

There are some blue and green beads in a container. If 150 more blue beads are added into the container, the percentage of green beads will decrease from 45% to 20%. How man

Intro to programming with java

Primitives are variables that hold one piece of data such as an integer, double, etc. References variables are more complex and can hold groups of related data. What are som

Present inside the container

A 50.0 g piece of CO2(s) (i.e. "dry ice") is sealed inside a0.250 L container held at 20°C. Based on the phase diagram of CO2(Figure 11.42 in the textbook), what state(s) of


Write a Review

Free Assignment Quote

Assured A++ Grade

Get guaranteed satisfaction & time on delivery in every assignment order you paid with us! We ensure premium quality solution document along with free turntin report!

All rights reserved! Copyrights ©2019-2020 ExpertsMind IT Educational Pvt Ltd