Reference no: EM133851772
Assignment:
• Develop, recommend, and maintain a company-wide Information Security Plan.
• Develop and maintain information security policies and procedures that address security regulations and the company's information security risks.
• Work with the business and technical resources to ensure that controls are utilized to address all applicable security regulations and the company's information security risks.
• Provide guidance and assistance to company leadership, information owners, andend users concerning their responsibilities.
• Ensure that annual information security risk assessments are performed and documented by information owners.
• Develop and recommend policies and establish procedures and practices, incooperation with the information owners, necessary to ensure the security of information and information resources against unauthorized or accidental modification, destruction, or disclosure.