Information Security Management

The assignments each week build upon the work and knowledge from the weeks beforehand. You will create 1 document that contains all of the weekly assignments—in separate sections—culminating with the final submission being a single document containing all of the weekly assignments.

You are responsible for adding each of these ongoing Individual Project assignments into your Key Assignment document that will contain a security plan for the organization to be used to protect the organization's assets.

The project deliverables are as follows:

• Security Management Plan
  • Use Word
  • Title page
    • Course number and name
    • Project name
    • Your name
    • Date
  • Table of Contents (TOC)
    • Use an autogenerated TOC.
    • This should be on a separate page.
    • This should be a maximum of 3 levels deep.
    • Be sure to update the fields of the TOC so that it is up-to-date before submitting your project.
  • Section Headings (create each heading on a new page with “TBD” as content, except for Section 1)
    • Section 1: Information Security Management (Week 1)
      • This section will be used to describe the organization and will establish the security model to be used by the organization.
    • Section 2: Security Program (Week 2)
      • This section will focus on existing frameworks that can help in the implementation of a security plan and what a security organization should look like.
    • Section 3: Security Policies (Week 3)
      • This section looks at security policies and their creation.
    • Section 4: Assessing Risk (Week 4)
      • This section will focus on risk assessments and methodologies used to perform one.
    • Section 5: Controlling Risk (Week 5)
      • This final section combines all of the previous sections and gives the opportunity to look at mechanisms to control risk.

Create the following section for Week 1:

• Section 1: Information Security Management
  • Describe an organization of your choosing, for which you will implement a security program.
  • Describe the principles of security management, including the following:
    • People
    • Process
    • Technology
  • Describe the role of project management with respect to implementing security management.
  • Describe how you plan to instill a secure mentality into an organization, including a tie into the project management discussion about when security concepts should be introduced into the project lifestyle.
• You should provide at least 2–3 pages of discussion for this information.
• Name the document “yourname_IT454_IP1_doc.”