The importance of continuous monitoring of information

Assignment Help Financial Management

Reference no: EM132255679

Assignment Overview

Continuous monitoring is a critical part of risk management process. "Continuous monitoring is ongoing observance with intent to provide warning. A continuous monitoring capability is the ongoing observance and analysis of the operational states of systems to provide decision support regarding situational awareness and deviations from expectations." -Source: Keith Willett (MITRE) in support of the NSA.

"Information Security Continuous Monitoring (ISCM) is defined as maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions." -NIST.

Organizations should establish, implement, and maintain ISCM. ISCM should be a recursive process as its monitoring strategy is continually refined so that ISCM is a robust system. Tiered organization-wide ISCM framework and dynamic ISCM processes are proposed by the National Institute of Standards and Technology. Please scan through the important framework and processes in the following article. Its Appendix D "Technologies for Enabling ISCM" provides some technical and managerial details and examples.

NIST (2011). Information Security -- Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations. National Institute of Standards and Technology Special Publication 800-137.

Additional reference models are also provided and extended to go more in depth both technically and managerially. Please investigate the CAESARS model below and its extension.

Mell, P., Waltermire, D., Feldman, L., Booth, H., Ouyang, A., Ragland, Z., & McBride, T. (2012). CAESARS framework extension: an enterprise continuous monitoring technical reference model (second draft).

Mell, P. (2011) Presentation: An Enterprise Continuous Monitoring Technical Reference Model. Jointly developed by the U.S. National Security Agency, the U.S. Department of Homeland Security, and the National Institute of Standards and Technology.

Assignment Expectations

After reading the above articles, please write a 3- to 5-page paper titled:

"Information Security Continuous Monitoring-Challenges and Solutions"

Please address the following issues in your paper:

The importance of continuous monitoring of information systems

The technical and managerial challenges of continuous monitoring

The technical and managerial solutions to continuous monitoring, including framework, processes, etc.

Reference no: EM132255679

Questions Cloud

Investigate the major demotivational factors : Assess the level of impact that the identified factors could have on specific areas of service & business if the administration does not address the situation.

What would be the important financial statements to be : If your friend asked you for advice on how to prepare forecasts for a new fashion boutique for women, what would you tell her?

At what point a person may be interested in pursuing this : Discuss the advantages and disadvantages of obtaining this type of financing, at what point a person may be interested in pursuing

Can you do to mitigate the risks as an exporter into these : If you decide to pursue your business venture in these countries, what are the specific risks that you face as an international business entrepreneur?

The importance of continuous monitoring of information : Continuous monitoring is a critical part of risk management process. "Continuous monitoring is ongoing observance with intent to provide warning.

What inventory method is used to value inventories : Evaluate the asset, debt, and equity structure of Logitech, and explain trends and changes found on the common-size balance sheet.

Describe the set of theory-based interventions : Each theory you examine in this course has its own framework for addressing client needs and its own set of theory-based interventions.

Formulate a theory-based treatment plan : Formulate a theory-based treatment plan including short-term and long- term goals for the couple or family. Describe two theory-based interventions you would.

Create a market entry plan : Create a market entry plan (entrepreneurial), a market expansion plan for an existing organization, or a mergers and acquisitions plan.

User Account

All Pages