Term Paper - The Rookie Chief Information Security Officer

Reference no: EM132985151 , Length: word count:2400 words

Assignment - Term Paper - The Rookie Chief Information Security Officer

Overview - Imagine that you have been recently promoted to serve as Chief Information Security Officer (CISO) for a Fortune 500 organization. This organization has known brand products across the world and expects top-secret methods for safeguarding proprietary information on its recipes and product lines.

The Board of Directors requests that their information security strategy be upgraded to allow greater opportunities for secure cloud collaboration between suppliers and resellers of their products. Another concern they have is the recent number of hacktivist attacks that have caused the network to fail across the enterprise. Their concern extends to making sure that they have controlled methods for accessing secured physical areas within their various regional facilities.

For your new position, you will be responsible for developing standards, methods, roles, and recommendations that will set the new IT security path for the organization. The existing organization has limited experience in supporting an enhanced level of IT security; therefore, you may need to outsource certain security services.

Instructions - Write an 8-12 page paper in which you provide the following deliverables:

Part 1: Organization Chart

Create an organization chart (use Visio or Dia) which illustrates the roles that will be required to ensure the design, evaluation, implementation, and management of security programs for the organization.

Within your organizational chart, clearly identify the reporting structure for roles such as IT Security Compliance Officer, Security Manager, CIO, CISO, IT Security Engineer, Privacy Security Professional, and IT Procurement Specialist.

List the types of resources required to fulfill each forensic duty of the organization below each of the roles you identified.

Align your organization chart to reflect the Department of Homeland Security (DHS) Essential Body of Knowledge's three areas of information security: physical security professional, privacy professional, and procurement professional.

Provide comments and comparisons on how your organizational chart fosters these three values.

Use three sources to support your writing. Choose sources that are credible, relevant, and appropriate. Cite each source listed on your source page at least one time within your assignment. For help with research, writing, and citation, access the library or review library guides.

Part 2: Request for Proposal (RFP) Plan

Develop a Request for Proposal (RFP) plan to solicit qualified vendors that could partner with your internal team to deliver optimum IT service delivery.

The RFP Plan should contain qualifying criteria of potential vendors and the responsibilities of the vendor once the contract is awarded.

As part of the plan, you must:

Describe at least two perspectives that need to be closely monitored within the contract.

Give your perspective on at least two methods that could be used to evaluate and develop a qualified trusted supplier list.

Part 3: Physical Security Plan

Recommend a physical security plan that could be used to protect sensitive areas such as telecom rooms, employee-only areas, and manufacturing facilities in which you include at least three specific methods.

Part 4: Enterprise Information Security Compliance Program

Establish an enterprise information security compliance program that addresses the concerns of the board of directors of the organization in which you describe specific plans and control objectives that could be adopted to address the known issues.

Suggest at least three information security policies that could be developed and practiced within the organization for data security assurance.

Outline the steps you would take to define the security needs of the organization in terms of duties, staffing, training, and processes.

Part 5: Risk Management Plan

Develop a risk management plan in which you describe at least three possible risk management efforts that could be used to assess threats and unknown issues.

Determine why defining priorities is an important part of the process when enumerating and having efficient risk control measures.

Suggest specific technical and management controls that could be enacted in order to monitor risks accurately.

The specific course learning outcome associated with this assignment is: Develop an organization's security plan, including an organization chart, a request for a proposal plan, a physical security plan, an enterprise information security compliance program, and a risk management plan.

Note - Need 2400 words paper + title page + references with in-text citations. Answers for all 4 parts and follow the requirements of each part exactly as asked for and in the same sequence only.

Reference no: EM132985151

Questions Cloud

What will the payout ratio be for silvana inc : Capital budget $850,000. If the firm follows the residual dividend policy and also maintains its target capital structure, what will its payout ratio be?

Compute the departmental overhead rate and amount of applied : Compute the departmental overhead rate and amount of applied overhead for Department A using direct labor hours as the allocation base

What is the net advantage to leasing in thousands : To finance some manufacturing tools it needs for the next 3 years, What is the net advantage to leasing (NAL), in thousands?

What percentage of the capital budget must be financed : It is committed to maintaining a $2.00 dividend per share. Given these constraints, what percentage of the capital budget must be financed with debt?

Term Paper - The Rookie Chief Information Security Officer : Term Paper - The Rookie Chief Information Security Officer. Develop a Request for Proposal (RFP) plan to solicit qualified vendors

Calculate the taxable capital gain : Calculate the taxable capital gain and/or allowable capital loss to be included in income by Mrs. Landlord, as a result of the sale of Building B

Standard deviations of the numbers imperfections : The distribution of the number of imperfections per 10 meters of synthetic failure is given by:

Calculate queen corporation income tax expense : Calculate Queen Corporation's Income Tax Expense for 2021. Net Operating Loss Carry Forward $1,000,000. §162 Expense (All Deductible) $ 500,000

Demonstrate how your learning is developing : Demonstrate how your learning is developing. How did you understand a concept before you read about it in this course?

User Account

All Pages