Develop an intake briefing for middle managers

Reference no: EM133244699

Assignment - Security Assessment and Testing

Your task - Develop an "intake" briefing for middle managers who will be assisting in the planning and execution of an internal audit of employee use of company-owned laptops as part of the company's "Work from Home" arrangements. The purpose of an "intake" briefing is to get everyone "on the same page" with respect to what will be done, who will do it, and what the roles & responsibilities of the managers will be during the audit (e.g., assist with employee contacts and "smooth ruffled feathers" amongst their workers).

Background - The purpose of the audit is to determine how the laptops are being used by the employees working from home (what corporate and non-corporate systems, services, networks, and websites are being accessed) and to uncover, if possible, any misuse (e.g.,a usage that is outside of the company's acceptable use policy). The audit should also look for evidence of laptops that are improperly configured or have vulnerable software installed.

Background: The company will follow the Information System Security Audit Process as defined by Harris &Maymi in the CISSP All-in-One Exam Guide, 8th edition. The steps are:

1. Determine Goals

2. Involve the right business unit leaders

3. Determine the scope

4. Choose the audit team

5. Plan the audit

6. Conduct the audit

7. Document the results

8. Communicate the results

Format: this week, your deliverable should be formatted as briefing paper (you will have a combination of paragraphs and bullet points). You should have an introduction, "analysis" section (explaining the ground rules and processes for how the audit will be conducted), and an appropriate summary section (including an appeal for cooperation and assistance). Include citations (in the text) and references (at the end) to support your work and allow your readers to fact check your analysis and conclusions.

Reference no: EM133244699

Questions Cloud

Brief background on the critical infrastructure : Brief background on the Critical Infrastructure as it relates to National Security. Consider how to Minimize Disruption that improves First Responder Safety

The role of data analytics in process : BUSI 300 Howard Community College How lessons learned from the State of California can be applied to your organization or industry.

Explain why an understanding of intersectionality matters : Discussion Board Question - Explain why an understanding of intersectionality matters when considering sexual and reproductive health

Video games and deviance : Choose a social group that was once considered "deviant," but is now considered more acceptable in our society.

Develop an intake briefing for middle managers : Develop an "intake" briefing for middle managers who will be assisting in the planning and execution of an internal audit of employee

How security assessments performed on the seven domains : ITN 266 Northern Virginia Community College how security assessments performed on the seven domains of a typical IT Infrastructure can be used to help achieve

Describe how you might use a shared workspace : IS 322 University of the South Pacific, Describe how you might use a shared workspace if you were the manager of an important global project for your

What is commodity fetishism according to marx : What is Commodity Fetishism according to Marx? What products do you/ have you fetishized in your own life? Where is the line between goods needed to live versus

Report on cobit5 framework for iot risk management : Write a case report on COBIT5 Framework for IoT Risk Management, including Introduction, Literature Review, Research Methodology, Finding and Discussion

User Account

All Pages