Information Systems
luckyqloo
W4D1...JP.docxFor a post to be substantial, it needs to genuinely add something new to the conversation. I am sure you will have no trouble writing about your personal experiences or research findings you have made.
Please reply to post -150-250 words
Agree with the assertion that standardization of Information system ensure high level of quality, safety, reliability and efficiency in the delivery of goods and services (Talib et al., 2012). When people at the same pace in terms of using technology ,then it is easy to drive changes and achieve goals
In Mathematics, there are several methods or ways you can use that will generate the same correct answer. The same can be said of information security
Different internet security policies or a combination of one or two different internet security policies can work together to achieve one goal-enhance information security.
Why enhance information security?
Because in today’s world trade, most of the financial transactions are performed online. You want your IT information system to be reliable and safe so more people can do business with you.
In the article, United Arab Emirates(UAE) have adopted ISO/IEC 27001 information security standard. It is used by organizations that manage information on behalf of others or it is applied to ensure the protection of critical information (Talib et al., 2012).
To be certified as a ISO/IEC 27001 station or organization, there are strict guidelines and procedures to follow.
If I am CIO of a big corporation and want my corporation to be certified as a ISO/IEC 27001 station, I am going to implement a security policy similar to ADSIC.
Firstly, I will have preliminary stages or phases to check for security risks in the system such as risk assessment, information security planning, security testing and Evaluation. Once I am satisfied with preliminary checks, then I will have the auditor over for certification and accreditation(Talib et al., 2012 )
Reference
Talib, A.M., Khelifi, A., Barachi, E.M., & Ormandjieva,O. (2012). ISO 27001: UAE Case Stud.. Issues in Informing Science & Information technology, 9, 331-349. Retrieved from http://eds.b.ebscohost.com.lopes.idm.oclc.org/eds/pdfviewer/pdfviewer?vid=2&sid=87e10353-2518-43e5-9c3c-023f1162a386%40sessionmgr104
