Explain effective incident management system, Risk Management

Assignment Help:

Question 1:

(a) Explain what is meant by the term „incident handling? in the context of information security.

(b) Describe the main features of an effective incident management system.

(c) Explain the main goals of a Business Impact Assessment for management and its role in incident management.

(d) Explain the main phases of the OCTAVE method for risk assessment and the key success factors for its implementation.

Question 2:

You have just been appointed as Security Consultant, reporting directly to the Chief Executive Officer in a major bookstore which in addition to its main store also operates an interactive website where orders can be placed online by customers as well as accepting credit card payments online. Your role is to advise management on what needs to be done by the company to be compliant with section 6.6 of the Payment Card Industry Data Security Standard. Your answer should state the security requirements for section 6.6 of the PCI DSS and focus on the process and options that management need to consider in order to secure web-based applications to be compliant with section 6.6.


Related Discussions:- Explain effective incident management system

Objectives of risk communication, Objectives of risk communication The ...

Objectives of risk communication The fundamental goal of risk communication, as you may have realized, is to provide meaningful, relevant and accurate information, in  clear  a

Risk Analysis & Modelling , Fire Risk model 1 1. Introduction The new All...

Fire Risk model 1 1. Introduction The new All-Scotland Fire Authority wishes to maximise the effectiveness of the service it provides to the Public, given the reduced budget it w

Explain role of the project manage, Question 1: Explain role of the pro...

Question 1: Explain role of the project manager throughout a project life cycle with reference to the following. (a) Setting up a project team (and the factors he has to con

Expected return over the benchmark, The Investment Committee is big on acti...

The Investment Committee is big on active management, and believes that there are areas/pockets of inefficiencies in the market. Knowing that you have taken Finance 455 at X-Univer

What is systematic risk, What is Systematic Risk Variability in a secur...

What is Systematic Risk Variability in a security's total returns which is directly associated with overall  movements  in  the  general  market  or  economy  is  known as syst

State about the interest rate risk, State about the Interest Rate Risk ...

State about the Interest Rate Risk Variability in a security's return resulting from changes in the level of interest rates is referred to as interest rate risk. Such change

What is the objective of risk management, Question: (a) What is the obj...

Question: (a) What is the objective of risk management? (b) Define the term risk avoidance. (c) Define and describe the Methodology of process approach in ISO 9000. (d

Differentiate between interest and currency swaps, a) Differentiate betwee...

a) Differentiate between interest and currency swaps. b) Suppose a Swiss firm, ACER Com Ltd, wants to invest in the U.S. The Swiss firm needs US dollars with a term to maturit

Determine about the bull-bear market risk, Bull-Bear Market Risk Thi...

Bull-Bear Market Risk This risk arises from the variability in the market returns resulting from alternating bull and bear market forces. Ø when security index rises fair

Show security market line, Q. Show Security market line? The CML repres...

Q. Show Security market line? The CML represent the equilibrium relation between the expected return and standard for efficient portfolio. But it does not indicate how individu

Write Your Message!

Captcha
Free Assignment Quote

Assured A++ Grade

Get guaranteed satisfaction & time on delivery in every assignment order you paid with us! We ensure premium quality solution document along with free turntin report!

All rights reserved! Copyrights ©2019-2020 ExpertsMind IT Educational Pvt Ltd