Skip to content
Solved Assignments

CIS 502 Elements of a Security Program Strayer University

This document explains the key elements of an information security program.

Preview 4 of 13 pages

See the first 4 pages exactly as they appear in the document.

  1. Page 1
    Read page 1 as text

    Running head: Elements of a Security Program Elements of a Security Program Donald Shipman Strayer University CIS 502 Prof. Adebiaye June 10, 2012 Describe the key components of an information security program for a midsized organization, highlighting the importance of risk management, policy development, and contingency planning. How do these components work together to ensure the protection of proprietary data and continuity of operations? Word count requirement: 800 - 1000 words

  2. Page 2
  3. Page 3
    Read page 3 as text

    Abstract The following paper describes the design of an information security program for a midsized organization of roughly 1000 local and remote employees. There are several essential components to creating a security program that include creating a policy, managing risk, life - cycle planning, contingency and disaster planning, awareness training and auditing. A solid security program is vital to protecting the proprietary data of an organization from both internal and external attacks in addition to having an organized plan to maintain productivity and recover in the event of an unforeseen disaster. The combination of knowledge, technology, awareness and accountability help to ensure a successful program.

  4. Page 4
    Read page 4 as text

    Introduction Information security is a key aspect in an organization of any size. The perception of many companies is that information security is only necessary as a matter of legal requirements. Many feel that because of the nature of the business that their company handles, they would not be targeted for any type of attack or be subject to any serious issues. This concept is a big mistake . The information that is provided in the policy will not only outline the policy, but also relay the message of its importance. Policy The policy portion of the program of the organization in all forms (written, spoken, recorded, or printed) is protected from unauthorized change for the duration of its life cycle and includes the physical hardware as well as any software that will be used to store, process, and send proprietary data. Each department level will have developed details of how the policy applies to that specific department, but will be consistent with the overall policy. All systems must be compliant with policies after the policy effective date and any systems not in compliance should be brought up to the required level as soon as is practical. System users may not display, download or email attachment, images, messages and cartoons of a sexual nature, ethnic slurs, racial comments, or anything considered harassing or disrespectful. Attachments from received emails should not be opened unless known (our company internal only) or expected, or are of the nature of specific business related formatting. (Goodchild, 2012) All internet data that is written, sent, or received through the computer system of the organization are considered the intellectual property of the company. (Goodchild, 2012) Care should be taken that the information that is in any and all internet email messages and other such transmissions are accurate, business appropriate, legal and ethical. The equipment, services

9 more pages in the full document

Unlock it once and it stays in your library, ready to chat with or turn into flashcards.

Unlock the full document

More Information Technology study materials

See all

Study this document with CramX

Once it is in your library, every tool can work from it.