The benefits of an Information Security Management ... - OpenMPE

More documents

Recommendations

Info

Documentation and Audit • Documentation − Consistent format − Accessible to relevant parties - online • Audit − Third party is the best − Internal and self assessment also acceptable 26
Do’s • Plan before doing • Limit scope − define clearly the scope of the ISMS • Get buy-in from all functions − an approach to implementing security that is consistent with the organisational culture − security policy, objectives and activities that reflect business objectives • Educate and communicate − Effective marketing of security to all managers and employees − Distribute guidance on information security policy and standards to all employees and contractors − Provide appropriate training and education 27
Page 1 and 2: IT Governance: The benefits of an I
Page 3 and 4: Agenda • What is an Information S
Page 5 and 6: 5 So Many Corporate Assets, So Litt
Page 7 and 8: Plan-Do-Check-Act Process Model (PD
Page 9 and 10: Security Organization • Appropria
Page 11 and 12: Risk Assessment • No one mandator
Page 13 and 14: What is an ISMS? • Framework to m
Page 15 and 16: Security Policy • Ensure support
Page 17 and 18: Asset Classification & Control •
Page 19 and 20: Physical and Environmental Security
Page 21 and 22: System Access Control • The exist
Page 23 and 24: Business Continuity Planning (BCP)
Page 25: ISO17799 Control Domains
Page 29 and 30: Commercial tools • CobiT − Cont
Page 31 and 32: Case study - HP Managed Services EM
Page 33 and 34: Summary • ISMS is a framework for
Page 35 and 36: Bibliography • IT Governance: Dat

The benefits of an Information Security Management ... - OpenMPE

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?