Introduction and comparison of different frameworks

7/18/2021 SafeAssign Originality Report

https://ucumberlands.blackboard.com/webapps/mdb-sa-BB5a31b16bb2c48/originalityReport?attemptId=97d65e5c-2491-4ed5-a648-f4a97ab7ee0f&co… 1/6

31848.202130 - SUMMER 2021 - ENTERPRISE RISK MANAGEMENT (ITS-835-B04) - SECOND BI-TERM

Week 3 Research Paper Suresh Palleboina on Sun, Jul 18 2021, 5:45 PM

93% highest match Submission ID: 97d65e5c-2491-4ed5-a648-f4a97ab7ee0f

Citations (6/6)

1 ENTERPRISE RISK MANAGEMENT (ITS-835-B04) WEEK-3 RESEARCH

PAPER SURESH PALLEBOINA

UNIVERSITY OF THE CUMBERLAND’S

July 17, 2021

Introduction:

Word Count: 1,338

Attachment ID: 4570480313

Week#3-Paper.docx

93%

1 Another student's paper

2 Another student's paper

3 Another student's paper

4 Another student's paper

5 Another student's paper

6 Another student's paper

7/18/2021 SafeAssign Originality Report

https://ucumberlands.blackboard.com/webapps/mdb-sa-BB5a31b16bb2c48/originalityReport?attemptId=97d65e5c-2491-4ed5-a648-f4a97ab7ee0f&co… 2/6

2 ISO 27001 IS AN INFORMATION SECURITY THE BOARD SYSTEMS

ASSURANCE INSTRUMENT. ISO 27001 IS A QUALITY CONTROL

PROCEDURE CONTAINING TECHNIQUES, SYSTEMS, AND SPECIFIC AND

REAL CONTROLS. The gadget is significant in the affiliation's organization of perils

related with information systems. 2 I WORK IN AFFILIATIONS WHERE ISO

27001 IS EMBRACED. The association has gotten the preparation all through the past

four years; the effects are so reassuring. 2 WITH THE EXECUTION OF ISO 27001

THE AFFILIATION HAS RECOGNIZED VARIOUS ACHIEVEMENTS THAT

HAVE ADDED TO ITS DISPLAY, BOTH INSIDE AND EXTERNAL.

ISO 27001 AS AN ISMS FRAMEWORK EFFECTIVENESS IN MY CURRENT IN

MY CURRENT ORGANIZATION:

Among the helpful results that I have seen where I as of now work is the restricted

receptiveness to security rates. Unlike what I have scrutinized and gotten some answers

concerning various associations including us, our affiliation has sorted out some way to

smoother security frequencies since ISO 27001 was gotten. From the start, the affiliation

recorded a couple of safety rate circumstances where others could attract even cases from

its customers whose data was entered or abused. Nevertheless, since the execution of ISO

27001, these cases have been diminished by numerous occasions. 3 ISO 27001 GOES

PROBABLY AS A GUARDING GADGET IN CHECKING INFORMATION

SECURITY EVENT ISSUES IN AFFILIATIONS WHERE IT HAS BEEN

EMBRACED.

The ISO 27001 has again been valuable by getting the association's standing. Information

protection cases can be sad for any association. 3 IT ISN'T USEFUL FOR THE

ADMINISTRATION TO REMAIN UNYIELDING WHEN SUCH CASES FLOOD

IN FROM OF THEM OR UNDER THEIR SUPERVISION. ISO 27001 HAS AN

ANSWER FOR THE ISSUE. FOR EXAMPLE, PRIOR TO PICKING TO

GUARANTEE THEIR DATA FRAMEWORKS, THE ORGANIZATION AT FIRST

ENCOUNTERED A FEW EXPLOITATIVE BEHAVIOUS FROM ITS STAFF. The

inside security issues could spoil the association's picture in the outside climate. 3 THE

ORGANIZATION LOST A FEW CLIENTS WHO FELT THAT THEY COULD

7/18/2021 SafeAssign Originality Report

https://ucumberlands.blackboard.com/webapps/mdb-sa-BB5a31b16bb2c48/originalityReport?attemptId=97d65e5c-2491-4ed5-a648-f4a97ab7ee0f&co… 3/6

SUCCUMB TO DATA ROBBERY (HSU & LU, 2016). THE QUALITY CONTROL

ARRANGEMENTS EMBRACED IN ISO 27001 HAVE UNCOVERED NATURAL

PRODUCTS IN THE ASSOCIATION.

THIS IS ON THE GROUNDS THAT; THE ASSOCIATION'S

ADMINISTRATION CAN'T UTILIZE ANY INSTRUMENT OR MACHINE THAT

DOESN'T SATISFY THE QUALITY GUIDELINES. THE UTILIZATION OF

POOR AND UNCERTIFIED ADVANCES, FOR EXAMPLE, PCS AND CAPACITY

PLATES REPRESENT A SERIOUS DANGER TO ANY TYPE OF ASSOCIATION

These advancements are destructive in light of the fact that they can undoubtedly keep an

eye on clients and the organization in general (Hsu & Lu, 2016). 3 ISO 27001 HAS

STAYED POWERFUL IN THE ASSOCIATION BY GUARANTEEING THAT AL

INNOVATIONS SATISFY DATA SECURITY GUIDELINES.

4 POOR DATA OR INFORMATION HANDLING CAN BE COSTLY AND

DANGEROUS TO ANY TYPE OF ORGANIZATION, MORE SO THOSE THAT

HAVE FAILED TO ADOPT ISO 27001. NOT ONE OR TWO, SEVERAL

COMPANIES HAVE FALLEN VICTIM TO CYBER-ATTACKS, DATA THEFT,

AND PIRACY ACROSS THE GLOBE. 2 BESIDES, MANY MORE LIKE

FACEBOOK HAVE FOUND THEMSELVES AT THE RECEIVING END OF THE

CUSTOMER’S WRATH. BASED ON MY CURRENT WORK, ISO 27001 HAS

PROVED TO REMEDY ALL ISSUES SURROUNDING INFORMATION, DATA,

AND PRIVACY (HSU & LU, 2016). THE QUALITY PRINCIPLES AND

CONCEPTS ADVOCATED BY ISO 27001 HAVE PROVED BEYOND A

REASONABLE DOUBT THAT THE MANAGEMENT SYSTEM SPECIFICATION

IS TAKING MATTERS SERIOUSLY.

Effectiveness of other frameworks:

4 BASED ON THE ARTICLE, OTHER FRAMEWORKS CAN BE UTILIZED TO

FACILITATE EFFECTIVENESS IN INFORMATION SECURITY AND ADDRES

THE RISKS ASSOCIATED. NOT ALL ORGANIZATIONS THAT HAVE

MANAGED TO ADOPT ISO 27001 (JONDLE ET AL., 2013). 2 BUT, THIS

7/18/2021 SafeAssign Originality Report

https://ucumberlands.blackboard.com/webapps/mdb-sa-BB5a31b16bb2c48/originalityReport?attemptId=97d65e5c-2491-4ed5-a648-f4a97ab7ee0f&co… 4/6

DOES NOT MEAN THAT THOSE THAT HAVE NOT MATED TO ACHIEVE AR

LOSERS.AN ORGANIZATION CAN MISS THE ISO CERTIFICATION BUT

STILL MANAGE TO SAFEGUARD THE SECURITY OF ITS DATA. ONE OF

THE DISCUSSED FRAMEWORKS APPLICABLE BY ORGANIZATIONS TO

ENSURE INFORMATION SAFETY AND REDUCE THE ASSOCIATED RISKS

IS CULTURE CREATION. 4 ACCORDING TO JONDLE, MAINES CULTURE

POSES THE MOST SIGNIFICANT IMPACT IN ENSURING THE SAFETY OF

INFORMATION OR DATA IN AN ORGANIZATION. 2 NEW EMPLOYEES

SHOULD JOIN THE ORGANIZATION AND FIND INFORMATION SECURITY

AS AN OVERALL RESPONSIBILITY RATHER THAN AN INDIVIDUAL’S OR

DEPARTMENTAL ROLE (JONDLE ET AL., 2013).

TRAINING AND DEVELOPMENT IS ALSO ANOTHER USEFUL

FRAMEWORK. MOST RISKS RESULT FROM HUMAN ERRORS. THOSE

INDIVIDUALS CAUSE MOST OF THESE ERRORS WITHIN THE COMPANY

WHO LACK KNOWLEDGE AND SKILLS TO DEAL WITH CERTAIN

SENSITIVE MATTERS. GETTING EVERYONE INVOLVED IN THE

ORGANIZATION’S SECURITY MANAGEMENT FUNCTION IS AN

EMPOWERMENT METHOD. IT IS GOOD TO BRING EVERYONE ON BOARD

BUT IT IS EVEN BETTER TO TRAIN THEM BEFORE BRINGING THEM ON.

INFORMATION AND SKILLS ARE POWERFUL TOOLS IN AN

ORGANIZATION’S INFORMATION SECURITY MANAGEMENT.

MOST MANAGERS AND ORGANIZATIONS NEED TO KNOW THAT

TRAINED TEAM MEMBERS ARE ASSETS TO THE COMPANY, WHILE

UNTRAINED PERSONNEL IS A LIABILITY. ACCORDING TO STATISTICS, IN

MOST DATA SECURITY ISSUES WHERE ORGANIZATION EMPLOYEES

HAVE BEEN INVOLVED, MOST OF THEM LACK KNOWLEDGE THAT CAN

HELP THEM TO REASON PROPERLY BEFORE MAKING DECISIONS

(JONDLE ET AL., 2013). GENERALLY, IT IS RISKY TO WORK WITH SUCH

PEOPLE. And through this all the manager in the organization should be able to handle

issues as per the formulated procedure to ensure all the parameters are well advanced an

making sure they are executed precisely for the interest of the company.

7/18/2021 SafeAssign Originality Report

https://ucumberlands.blackboard.com/webapps/mdb-sa-BB5a31b16bb2c48/originalityReport?attemptId=97d65e5c-2491-4ed5-a648-f4a97ab7ee0f&co… 5/6

2 BETTER FRAMEWORKS TO USE FOR ADDRESSING RISKS:

FROM THE POOL OF RESEARCH WORKS I HAVE MANAGED TO UNCOVER

THERE AREN’T BETTER FRAMEWORKS FOR ADDRESSING THE SECURIT

RISKS. THE ONLY FRAMEWORKS PROVIDED ARE INTERNAL MEASURES

OR FRAMEWORKS. I believe through this scenario, it will be easy for the managemen

of the framework and in the addressing the security measures. The importance of this

measure is to ensure there is safeness of the internal activities within the organization an

keeping the organization intended ask safe. 2 THE INTERNAL MEASURES ARE

DEVELOPED BECAUSE INTERNAL FORCES CAUSE MOST OF THESE

RISKS. AMONG THE INTERNAL MEASURES PROPOSED IS THE

DEVELOPMENT OF PRIVACY POLICIES. 4 HOWEVER, THEY DO NOT

TOUCH DIRECTLY TO THE STORY (JONDLE ET AL., 2013).

2 CURRENTLY, THE MOST COMMONLY UTILIZED IS AN ALL-INCLUSIVE

DECISION-MAKING PRACTICE.

4 NOWADAYS, MANAGERS AND OTHER TOP-LEVEL EXECUTIVES

EMBRACE AN ALL-INCLUSIVE DECISION MAKING RATHER THAN

CENTRALIZING THEM WITHIN THEMSELVES. 2 DECISIONS LIKE

ADOPTION AND IMPLEMENTATION OF CYBERSECURITY POLICIES NEED

TO GET EVERYONE INVOLVED. The decision is to ensure there is safety in making

sure the organization is able to protect its services and also its mandate. Cyber security

being one of the goals in the ensuring that the files within the organization are protected.

It is therefore, necessary in making sure security of the data is paramount. It is the only

way of ensuring there is uniformity of the data. 2 IN THE CASE WHERE THE IS NO

SERVICE IN EVERY INDIVIDUAL WITHIN THE COMPANY NEEDS TO BE

INFORMED AND MADE AWARE THAT INFORMATION SECURITY IS

SENSITIVE. PEOPLE LIKE THE SUBORDINATE STAFF SHOULD KNOW

HOW TO RESPOND TO SITUATIONS OR WHAT ARE THE PROCEDURES

FOLLOWED WHEN RESPONDING TO AN INCIDENT (JONDLE ET AL.,

2013).

7/18/2021 SafeAssign Originality Report

https://ucumberlands.blackboard.com/webapps/mdb-sa-BB5a31b16bb2c48/originalityReport?attemptId=97d65e5c-2491-4ed5-a648-f4a97ab7ee0f&co… 6/6

Conclusion

2 INFORMATION SECURITY IS ONE OF THE MOST CRITICAL TOPICS IN

THE BUSINESS AND INFORMATION TECHNOLOGY INDUSTRIES. THE

TOPIC IS IMPORTANT BECAUSE IT IS TOUCHES ISSUES THAT HAVE

INFLUENCED PEOPLE FOR AN EXTENDED PERIOD NOW. IN MOST

CASES, WHERE DATA AND INFORMATION PRIVACY HAVE BEEN

REPORTED, CUSTOMERS ARE THE MAIN LOSERS. AS ONE OF THE WAYS

OR STRATEGIES THAT ORGANIZATIONS AND RESEARCHERS HAVE

COME UP WITH TO MANAGE INFORMATION SECURITY ISSUES IS THE

INTRODUCTION OF ISO 27001 (JONDLE ET AL., 2013). THE ISO 27001 HAS

BROUGHT SIGNIFICANT DEVELOPMENTS IN DATA AND PRIVACY ISSUES

MANAGEMENT. OTHER FRAMEWORKS INVOLVED IN THIS EXERCISE

INCLUDE INTERNAL MANAGEMENT AND CONTROL SYSTEMS AND

EMPLOYEE PERSONNEL TRAINING AND DEVELOPMENT. 4 THESE

STRATEGIES DEMONSTRATE THAT COMPANIES CAN STILL FAIL TO

ACHIEVE THEIR DESIRED GOALS (HSU & LU, 2016).

Reference

2 · JONDLE, D., MAINES, T. D., BURKE, M. R., & YOUNG, P. (2013). 2

MODERN RISK MANAGEMENT THROUGH THE LENS OF THE ETHICAL

ORGANIZATIONAL CULTURE. RISK MANAGEMENT, 15(1), 32-49.

5 · HSU, C., WANG, T., & LU, A. (2016). 5 THE IMPACT OF ISO 27001

CERTIFICATION ON FIRM PERFORMANCE. 6 IN 2016 49TH HAWAII

INTERNATIONAL CONFERENCE ON SYSTEM SCIENCES (HICSS) (PP. 4842-

4848). IEEE.

2