CSM660: Each of an Organization’s Communities of Interest Must Address Information Security in Terms of Business: Information Security Management Assignment, AEU, Singapore

Question 1

“Each of an organization’s communities of interest must address information security in terms of business impact and the cost of business interruption, rather than isolating security as a technical problem.”

Discuss the above statement and relate your answer with the key functions of information security to an organization.

Question 2

There are many threats and vulnerabilities to information security that happened out there. Based on the categories of threats in Table 1, select any FIVE (5) treats and find an example of real-world attacks that correspond to it.

Question 3

Assuming that your company is planning to develop a Computer Security Incident Response Team (CSIRT), provide your recommendations on the steps that need to be taken to establish the CSIRT in order to mitigate damage from attacks on information systems and prevent breaches of information security

Question 4

Search for the term “Security Awareness” on the Internet and study your company’s security policies. In 400-500 words, write a short essay discussing the development and execution of information security policies in your organization.

Your discussion should be focusing on the three types of information security policies, namely Enterprise Information Security Program (EISP), Issue-specific Information Security Policies (ISSP), and System-specific Information Security Policies (SysSP). Propose TWO (2) possible policies if the company security policy is not in place and provide your suggestions to improve security awareness in your organization.