Name
Strayer University
Information Security Plan for a Medium-Sized Financial Institution
CIS 359 – Disaster Recovery Management
Assignment 2:
Due Week 3 and worth 75 points
Suppose you were hired as the Chief Information Security Officer (CISO) for a medium-sized financial
institution. Your task is to develop an information security plan to protect sensitive customer data and
financial assets. The board is concerned about data breaches and regulatory compliance.
Write a paper outlining the key components of your information security plan, strategies to gain
board buy-in, potential challenges, and ways to overcome them.
1. Explain the basic primary tasks, ongoing evaluations, and major policy and procedural changes
that would be needed to perform as the BC lead / manager.
2. Provide insight on how to plan the presentation to garner management and Board buy-in for
those who are skeptical.
3. Discuss the first four (4) high-level activities that would be necessary in starting this initiative in
the right direction and describe the potential pitfalls of each.
4. Speculate on the most comprehensive and / or critical challenge(s) in the infancy of this initiative
and explain how to overcome that challenge(s).
5. Use at least three (3) quality resources in this assignment. Wikipedia and similar Websites Note:
do not qualify as quality resources.
Your assignment must follow these formatting requirements:
Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all
sides; citations and references must follow APA or school-specific format. Check with your
professor for any additional instructions.
Include a cover page containing the title of the assignment, the student’s name, the professor’s
name, the course title, and the date. The cover page and the reference page are not included in
the required assignment page length.
The specific course learning outcomes associated with this assignment are:
