Define a risk management framework that will be used

Assignment Help Computer Engineering

Reference no: EM133693215

Homework: Develop an IT governance strategy for an organization.

Purpose

Organizations that you work for will often apply an IT governance framework such as COBIT or ISO 27001, or one of the others that are available. These frameworks provide guidelines for IT governance in the organization and offer guidelines for building a governance system. In this unit, you will apply the ISO 27001 Information Security Management System (ISMS) framework to begin outlining a governance strategy for an organization.

Instructions

Select an organization that you would like to develop an IT governance strategy for, using ISO 27001, Information Security Management System (ISMS). You can find ISMS on the Internet or in this unit's reading. The organization should be one you are familiar with from having worked there.

In your paper, include the following:

I. Define and discuss the ISO 27001 Information Security Management System in terms of the Deming Cycle of continuous improvement of Plan-Do-Check-Act (PDCA)

II. Brief description of the organization and type of business engaged in.

III. High-level information security policy that defines management's overall objective for information security as it relates to business requirements and relevant laws and regulations.

A. Information security direction for the organization
B. Information security objectives for the organization
C. Information on how the organization will meet contractual, legal, and regulatory requirements
D. A statement of commitment to continuous improvement of the ISMS.

IV. High-level risk assessment (for purposes of this paper, discuss the top 3-4 risks only)

A. Define a risk management framework that will be used
B. Identify risks and describe the risk
C. Analyze and evaluate the risks in terms of severity and impact

V. Statement of Applicability

A. Identify selected controls to address identified risks (again only the top 3-4 risks)
B. Explanation of why these controls were selected

VI. Conclusion paragraph

This is a short version of an IT governance strategy but will provide a good understanding of the elements that must be included for this ISO 27001 ISMS.

Reference no: EM133693215

Questions Cloud

Describe how practical implications resulting from research : Describe how the practical implications resulting from the research could be used by stakeholders of the research (1-2 paragraphs).

How tam is impacting educational settings : Define TAM and the components. Note how TAM is impacting educational settings. Give an overview of the case study presented and the findings.

What existing laws do you feel would need to be considered : What existing laws do you feel would need to be considered and why? Are there any cases related to AI and predictive assessment that have been ruled on?

Dissertation on energy transition strategies for oil and gas : Dissertation on Energy Transition Strategies for Oil and Gas Companies in Nigeria - Analysis of the Energy Transition Competencies of Oil and Gas Companies

Define a risk management framework that will be used : Define a risk management framework that will be used. Identify risks and describe the risk. Analyze and evaluate the risks in terms of severity and impact.

Explain why you think one will work better : Explain why you think one will work better, and why you think the other will not work as well...be VERY SPECIFIC regarding class project tasks that have.

Discuss key decisions necessary for making strategy choices : Discuss the key decisions necessary for making strategy choices. Develop an Annotated Bibliography for the additional references used in your discussion.

What kind of independent variable necessary to infer cause : BUSI 820- What kind of independent variable (active or attribute) is necessary to infer cause? Can one always infer cause from the type of independent variable?

What is their design language : What is their design language? Can your object actually develop formally in response to your precedent and Do they react in respect? In challenge or retaliation

User Account

All Pages