Information Technology Career Profile Sheet – Unit 4
1. Name: Shelby Hoke
2. Date: 10/21/2021
3. Career Title: Chief Information Security Officer (CISO)
// Items 4-7 were completed in Unit 1.
// Items 8-11 were completed in Unit 2.
// Items 12-13 were completed in Unit 3.
14. Data Types:
All of an organization’s data. Whether it be patented technology, confidential information, proprietary
source code, or any digital assets. CISO responsibility is to oversee an organization’s data and security.
15. Data Sources:
Company's financial accounts, bank statements, customer’s billing information, all of the company’s
passwords, sensitive data, inventory, reports from different departments, stakeholder information
16. Data Protection:
Risk assessment
Data loss prevention
Data vault
VPN
Multiple firewalls
Zero-Day attack defense
Disaster recovery plans
Cloud security assessment
Pen testing
Encryption
Access control
Authentication
Managed detection and response services
Intrusion detection
Intrusion prevention
Internal threat detection
Lateral threat detection
Suggestions on security protocols:
Enable biometric passwords
Key fobs
Setting time limits on sensitive data. Like how long it can be viewed for
Strict protocols on what employees can and cannot do on the computers at work. Such as get on
social media
Two step authentication
Data vaults
Frequently changing passwords
Security awareness training
Dark web monitoring
Regular system backups
