Student: Information Security Essay

Submitted By therealdemo43
Words: 6593
Pages: 27
Open Document
Guide for the Role and
Responsibilities of an
Information Security Officer
Within State Government
April 2008
Table of Contents
Introduction
_________________________________________________________________ 3
The ISO in State Government
___________________________________________________ 4
Successful ISOs – Necessary Skills and Abilities
____________________________________ 7
Twelve Components of an Effect ive Information Security Program
_____________________ 9
The ISO Role and Responsibi lities in Each Component
_____________________________ 11
Risk Management
________________________________________________________________ 12
Security Policy Management
_______________________________________________________ 16
Organizing Information Security
___________________________________________________ 19
Asset Management and Protection
__________________________________________________ 22
Human Resources Security
________________________________________________________ 24
Physical and Environmental Security
________________________________________________ 27
Communications and Operations Management
________________________________________ 30
Access Control
___________________________________________________________________ 36
Information Systems Acquisition,
Development, and Maintenance
________________________ 39
Information Security Incident Management
__________________________________________ 42
Disaster Recovery Management
____________________________________________________ 46
Compliance
_____________________________________________________________________ 48
Conclusion
_________________________________________________________________ 51
Glossary
___________________________________________________________________ 52
Office of Information Security and Privacy Protection
Page 2
Guide for the Roles and Responsibil ities of an Information Security Officer With in State Government
April 2008
Introduction
Each agency must identify and implement information security policies, standards, guidelines, processes, procedures, and best practices to further strengthen its security program to protect its information assets while assuring its goal s and objectives are being met. Typically, the
Information Security Officer (ISO) manages an agency’s information security program. The information security program has five important objectives:
1. Protect the agency’s information and information processing assets.
2. Manage vulnerabilities within the information processing infrastructure.
3. Manage threats and incidents impacting the agency’s information resources.
4. Assure through policy the appropriate use of the agency’s information resources.
5. Educate employees about their information security and privacy protection responsibilities. The Guide for the Roles and Responsibilities of an Information Security Officer Within State
Government
provides a state agency and the ISO general guidance and assistance in understanding the ISO role and responsibilities in developing and maintaining an effective information security program. This Guide closely a ligns with the Office of Information Security and Privacy Protection’s (OISPP)
Information Security Program Guide for State Agencies and drills down into more detail about the important role of an agency ISO. Agency ISOs should become familiar with both of these Guides as it will assist them in implementing a strategy for an effective information security program.
The OISPP is grateful to the many agency ISOs and other security professionals who have provided their input to shape the content of this Guide.
Office of Information Security and Privacy Protection
Page 3
Guide for the Roles and Responsibil ities of an Information Security Officer With in State Government
April 2008
The ISO in State Government
All state agencies are to designate an ISO to oversee the agency’s
Show More

Related Documents: Student: Information Security Essay

Information Security Essay examples

Government & Law Information Security 7162 Page 1 of 6 Australian Government Higher Education (CRICOS) Registered Provider number: #00212K This Unit Outline must be read in conjunction with: a) UC Student Guide to Policies, which sets out University-wide policies and procedures, including information on matters such as plagiarism, grade descriptors, moderation, feedback and deferred exams, and is available at (scroll to bottom of page) http://www.canberra.edu.au/student-services b) UC Guide…

Words 2204 - Pages 9

Sec 402 Wk 2 Case Study 1 the Critical Need for Information Essay

SEC 402 WK 2 CASE STUDY 1 THE CRITICAL NEED FOR INFORMATION To purchase this visit here: http://www.activitymode.com/product/sec-402-wk-2-case-study-1-the-critical-need-for-information/ Contact us at: SUPPORT@ACTIVITYMODE.COM SEC 402 WK 2 CASE STUDY 1 THE CRITICAL NEED FOR INFORMATION SEC 402 WK 2 Case Study 1 - The Critical Need for Information Security Write a four to five (4-5) page paper in which you: 1. Identify at least three (3) benefits or key knowledge points that could be…

Words 1080 - Pages 5

Education and Student Number Identifier Essay

Florida Virtual School Student Identification Form **Due to recent changes in legislation (1011.622 F.S.), FLVS must obtain and match the unique student identification number used by your current public school.** Please take this form to your public school front office and obtain the required information. Then log back into your VSA account and enter the information provided by your school. District/School Name: District Name School Name Legal Name Used by Public School: First Name Middle Name…

Words 362 - Pages 2

Nt1330 Unit 3 Assignment 1

manage the data. Every student and teacher have a H Drive which is only accessible by that person using a username and password. The main use for this drive is for students and teachers to have access to their own files and to save their own work through the drive. The capacity of a student’s H Drive is 1.22 TB and is the responsibility of the student to manage their own disk space. The student H Drives are set up when a student is enrolled at Sacred Heart College. The students also have a S Drive which…

Words 1673 - Pages 7

Essay on Health Care and User Agreement Form

Alberta Health Services (AHS) has the legal responsibility for protecting the confidential health and personal information of patients, co-workers, the public and AHS business information. The AHS Information & Privacy department ensures this responsibility is upheld by providing the necessary training and education resources. As such, all AHS employees and affiliates (e.g. students/instructors, volunteers, physicians, etc.) MUST complete the following mandatory privacy training prior to participating…

Words 471 - Pages 2

UNB Security

UNB Security is tasked with the safety and protection of students at the University of New Brunswick. Included in the security team’s responsibilities is to respond to incidents on campus, relating to harassment, discrimination, assault, sexual assault, and improper conduct. This team’s role is intervention and prevention of incidents, as well as investigation and prosecuting those who commit violations to UNB’s rules and policies. The current rules and standards for dealing with issues brought before…

Words 1310 - Pages 6

Identity Theft Research Paper

identity stolen often feel like they were violated. Any individual can have their identity compromised in numerous ways. Different institutions store personal information. There are several organizations that have social security numbers, bank account numbers, and credit card numbers. Colleges and Universities have people personal information stored in their databases that could be hacked. There are several companies that offer options to people to protect their identity. Most credit card companies…

Words 2699 - Pages 11

Essay on Critical Thinking

people are comfortable doing important things online as long as their information is protected by passwords; however, news of the “Heartbleed” bug in April has brought the public’s attention to computer security again. It is advised that web users should always be security-conscious when they use online services and developing a good security habit could effectively reduce the opportunity of being hacked. Online security is often misunderstood. In reality, online services are not as secure as…

Words 941 - Pages 4

Access Control System Essay

configure the server roles, the proximity readers and the facial recognition software. Step four involves loading all the initial student information and authorized personnel information. Step 4a, we upload all the pictures of students and authorized personnel into the database. Step five is where we do a complete system run to test the proximity readers, security cameras to ensure they are calibrated to turn towards the person entering the building, then to make sure the computers and facial…

Words 1006 - Pages 5

Rough file Essay

Social Security Numbers For Noncitizens Does a noncitizen need a Social Security number? Unless you are a noncitizen who wants to work in the United States, you probably do not need a Social Security number. Generally, only noncitizens authorized to work in the United States by the Department of Homeland Security (DHS) can get a Social Security number. Social Security numbers are used to report an individual’s wages to the government and to determine a person’s eligibility for Social…

Words 1123 - Pages 5