The benefits of an Information Security Management ... - OpenMPE

More documents

Recommendations

Info

Risk Management • No mandatory risk management methodology • Choose one of the four approaches below for identified risks − Accept − Mitigate − Avoid − Transfer • Must have management support and sign-off 12
What is an ISMS? • Framework to manage the security risks within an organization • Highlights − Security policy − Organizational setup for security personnel − Risk assessment and management methodology − Controls and how they are implemented − Regular review − Proper documentation 13
Page 1 and 2: IT Governance: The benefits of an I
Page 3 and 4: Agenda • What is an Information S
Page 5 and 6: 5 So Many Corporate Assets, So Litt
Page 7 and 8: Plan-Do-Check-Act Process Model (PD
Page 9 and 10: Security Organization • Appropria
Page 11: Risk Assessment • No one mandator
Page 15 and 16: Security Policy • Ensure support
Page 17 and 18: Asset Classification & Control •
Page 19 and 20: Physical and Environmental Security
Page 21 and 22: System Access Control • The exist
Page 23 and 24: Business Continuity Planning (BCP)
Page 25 and 26: ISO17799 Control Domains
Page 27 and 28: Do’s • Plan before doing • Li
Page 29 and 30: Commercial tools • CobiT − Cont
Page 31 and 32: Case study - HP Managed Services EM
Page 33 and 34: Summary • ISMS is a framework for
Page 35 and 36: Bibliography • IT Governance: Dat

The benefits of an Information Security Management ... - OpenMPE

Create successful ePaper yourself

Delete template?

Save as template?