Reference no: EM133597245 , Length: 6 Pages

Assignment:

As the CISO of a healthcare facility, you are tasked with using the information from the artifacts developed in the previous weeks, as well as the NewTab Project Profile, to complete the following:

• Evaluate the requirements for a strategic plan.
• Create strategic plan for the information security program supporting the organization's business objectives.
• Develop a financial model for the investments needed to support the information security program in alignment with the strategic plan.

Part A: Strategic Plan

Create 3 page information security strategic plan that includes the following components:

• Purpose of the Strategic Plan
• Major components in the information security organization, including the following:
• Security management
• Security governance, compliance, and policies
• Risk management
• Security operations center (SOC), including SIEM capabilities
• Required information security personnel for each component
• Recommended initiatives for improving the healthcare organization's information security posture based on the POA&M from the Week 2 -
• Security Assessment Plan assignment, including the following:
• Mitigation actions
• The cost for each mitigation
• Estimated time frame for completion of each initiative

Part B: Financial Model

Create 3 page financial plan for the operation of the information security department as defined in Part A. Include the following:

• Description of each cost category along with the total annual operating costs
• Estimated annual operating costs for supporting the information security department based on the information in Part A