Essay on The Complete Guide To Information Security

Submitted By bvelmonte
Words: 707
Pages: 3
Open Document
The Complete Guide to Information Security

Chapter I: What is Information Security?

A Information Security vs. Information Assurance 1. Information security is a sub field of Information Assurance.
a. Information security is more specific and geared towards technology, the component level and operations.
b. Information Assurance is more strategy focused and concerned with information in terms of the ‘big picture’.

2. Risks, Threats, Vulnerablities. a. Risks b. Threats c. Vulnerablilities

3
B. Three tenets of Information Security. 1. Confidentiality a b 2. Integrity a b 3. Assurance

C. Seven major areas an Information Security must address. 1. Acceptable Use (of data, facilities, resources, etc.)
2. Security Awareness and Training (of employees and other users of the system)
3. Asset Classification (public, private, confidential, etc.)
4. Asset Protection and Access Protocols (protection, permissions, etc.)
5. Asset Management and Operation (systems development, system operation, day‐to‐day procedures)
6. Identification, Assessment and Management of Vulnerabilities (for management)
7.Identification, Assessment and Management of Threats Policies (for management)

D. Twelve generally accepted principles of Information Security.

Principle 1: There is no such thing as Absolute Security.
Principle 2 The three Security Goals are Confidentiality, Integrity, and Availability
Principle 3: Defense in Depth should be the fundamental strategy
Principle 4: When left on their own, most people tend to make the worst security decisions.
Principle 5: Security depends on two types of requirements: Functional and Assurance (in other words,security systems must not only be designed, they must be tested and proven to meet the requirements)
Principle 6: Security Through Obscurity is not Security
Principle 7: Security = Risk Management
Principle 8: The three types of Security Controls are Preventive, Detective, and Responsive
Principle 9: Complexity is the Enemy of Security
Principle 10: Fear, Uncertainty and Doubt do not work when selling security
Principle 11: People, Process, and Technology are ALL needed to adequately secure a system or facility.
Principle 12: Open disclosure of Vulnerabilities is good for security

E. Industry recognized Information Security certifications. 1. CompTIA Security + 2. (ISC)2 CISSP- Certified Information Systems Security Professional 3. CEH – Certified Ethical Hacker 4. CPTE- Certified Penetration Testing Engineer 5. CPTC- Certified Penetration Testing Consultant 6. CEPT – Certified Expert Penetration Tester

F. CISSP ten common body of Knowledge Domains

1. Information Security Governance and Risk Management
2. Security Architecture, Models, and Design
3. Software Development Controls and Security
4. Operations Security
5. Physical Security and the Physical Environment
6. Access Control
7. Telecommunications and Network Security
8. Cryptography
9. Legal Issues, Regulations, Investigations and Forensics
10. Business Continuity and Disaster Recovery Planning

Chapter II Policies, Procedures, Standards, Regulations, Guidelines

A . Policies
1
a.
b.

2 a b

3

B.
Show More

Related Documents: Essay on The Complete Guide To Information Security

Student: Information Security Essay

Guide for the Role and Responsibilities of an Information Security Officer Within State Government April 2008 Table of Contents Introduction _________________________________________________________________ 3 The ISO in State Government ___________________________________________________ 4 Successful ISOs – Necessary Skills and Abilities ____________________________________ 7 Twelve Components of an Effect ive Information Security Program _____________________ 9 The ISO Role and…

Words 6593 - Pages 27

Nt1310 Unit 2 Assignment Of Training Aid

A complete set of documentation includes user documentation, system documentation, software documentation and operations for performing various system tasks, recovery, and documentation for backup, auditing and security actions is also needed. There are two types of documentation: system documentation and user documentation. System Documentation System…

Words 509 - Pages 3

Information Security Essay examples

Law Information Security 7162 Page 1 of 6 Australian Government Higher Education (CRICOS) Registered Provider number: #00212K This Unit Outline must be read in conjunction with: a) UC Student Guide to Policies, which sets out University-wide policies and procedures, including information on matters such as plagiarism, grade descriptors, moderation, feedback and deferred exams, and is available at (scroll to bottom of page) http://www.canberra.edu.au/student-services b) UC Guide to Student…

Words 2204 - Pages 9

how to install Essay

QUICK INSTALLATION GUIDE Wireless-G Broadband Router with SpeedBooster Model: WRT54GS Package Contents • Wireless-G Broadband Router with SpeedBooster • Setup Software and User Guide on CD • Network Cable • Power Adapter • Quick Installation Guide Installation A. Insert the Setup CD-ROM into your CD-ROM drive. B. If you use a PC, click Start Setup, and proceed to step D. If you use a Mac, skip to step C. C. Double-click the CD on your desktop. Then double-click…

Words 400 - Pages 2

CH 15 Essay

Study Guide to accompany Canadian Business and the Law, 5th edition Chapter 15 CHAPTER 15 THE CORPORATE FORM: ORGANIZATIONAL MATTERS Objectives After studying this chapter, you should have an understanding of • a corporation as a legal person • the distinction between federal and provincial incorporation • the share structure of a corporation • the selection of a corporation’s name • how a corporation is created • how the corporation is financed • how securities are regulated Learning Outcomes…

Words 4206 - Pages 17

Strategies: Operating System and Security Strategies Essay

Security Strategies in Windows Platforms and Applications (J & B Learning Information Systems Se By Michael G. Solomon Security Strategies in Windows Platforms and Applications (J & B Learning Information Systems Se Description: PART OF THE NEW JONES & BARTLETT LEARNING INFORMATION SYSTEMS SECURITY & ASSURANCE SERIES! More than 90 percent of individuals, students, educators, businesses, organizations, and governments use Microsoft Windows, which has experienced frequent attacks against its well-publicized…

Words 368 - Pages 2

Income Tax And Benefit Return

Protected B when completed T1 GENERAL 2012 Income Tax and Benefit Return Complete all the sections that apply to you. For more information, see the guide. 8 Information about you Identification Enter your social insurance number (SIN): Year Print your name and address below. Month Day Enter your date of birth: English Your language of correspondence: Votre langue de correspondance : First name and initial Français Marital status Last name Tick the…

Words 1581 - Pages 7

Student Essay

John Moura Chapter 1 – Introduction to the Management of Information Security Review Questions 1. A globally interconnected commercial world has emerged from the technical advances that created the Internet. Has its creation increased or decreased the need for organizations to maintain secure operation of their systems? Why? Answer: As Internet use continues to rise, the amount of “malicious entities” is also rising. As “malicious entities” grow and become more numerous, the…

Words 1125 - Pages 5

Nt1310 Unit 3 Security Analysis Paper

9. Continuously monitor in real-time the security of your organization’s infrastructure 10. Deploy web application firewalls 11. Permit only authorized wireless devices to connect to your network 12. Implement Always On Secure Socket Layer (AOSSL) for all servers requiring log on authentication and data collection. 13. Review server certificates for vulnerabilities 14. Ensure all updates and patches verified/signed coming from a trusted source. 15. Back up key data to offline storage. 16. Develop…

Words 1410 - Pages 6

Introduction: Information Security Policy Essay example

Introduction Student Name: Shelby Hartsell University of Phoenix IT/244 Intro to IT Security Instructor’s Name: Dr. Flores Date: 06/21/2015 1.Introduction Due in Week One: Give an overview of the company and the security goals to be achieved. 1.1.Company overview As relates to your selected scenario, give a brief 100- to 200-word overview of the company. The Bloom Design group offers interior design services to their customers nationwide. They have locations in New York and Los Angeles. The main…

Words 749 - Pages 3