Preview

Security and Gap Analysis

Satisfactory Essays
Open Document
Open Document
632 Words
Grammar
Grammar
Plagiarism
Plagiarism
Writing
Writing
Score
Score
Security and Gap Analysis
IS4799 Information Systems and
Cybersecurity Capstone Project
Unit 3
IT Security Policy Framework Gap
Analysis
© ITT Educational Services, Inc. All rights reserved.

Learning Objective and Key
Concepts
Learning Objective
 Plan and perform a security compliance gap analysis Key Concepts
 Information technology (IT) security policy
 Security controls
 Compliance requirements
 Gap analysis

IS4799 Information Systems and Cybersecurity Capstone Project

© ITT Educational Services, Inc. All rights reserved.
Page 2

EXPLORE: CONCEPTS

IS4799 Information Systems and Cybersecurity Capstone Project

© ITT Educational Services, Inc. All rights reserved.
Page 3

Compliance and Governance
Requirements
 Requirements
• Compliance
• Governance

 Identify the requirements that apply
 Specific to types of organizations
• Organizations that handle payment cards must comply with

Payment Card Institute Data Security Standard (PCI DSS).
• Organizations that handle personal medical records must comply with Health Insurance Portability and Accountability
Act (HIPAA).

IS4799 Information Systems and Cybersecurity Capstone Project

© ITT Educational Services, Inc. All rights reserved.
Page 4

Align Requirements
 Align requirements to client’s policy framework.  Associate existing policy to requirements.
 Include descriptions for proposed changes.

IS4799 Information Systems and Cybersecurity Capstone Project

© ITT Educational Services, Inc. All rights reserved.
Page 5

Alignment Process
Identify
requirements.

Review existing policy.

Associate requirements to policy.

IS4799 Information Systems and Cybersecurity Capstone Project

© ITT Educational Services, Inc. All rights reserved.
Page 6

Review Policy Components
 Policy: Rules that fulfill security objectives
 Standards: General requirements everyone must meet
 Guidelines: Best practices for specific contexts  Procedures: Step-by-step instructions for carrying out tasks

IS4799 Information Systems and
Continue Reading
View Writing Issues

You May Also Find These Documents Helpful

  • Satisfactory Essays

    Argyle Security Case Study
    • 756 Words
    • 4 Pages

    Argyle Security Case Study

    Argyle Security Inc. is a detention and commercial security provider based out of San Antonio, TX. Established in 2005 originally as Argyle Security Acquisition Corporation, Argyle Security Inc. operates through five different business units ISI, MCS, PDI, Com-Tec, and MCS Fire & Security business units. In April 2008, the private equity firm MML Capital made a $15 million investment into Argyle Security. The company has since successfully positioned itself to take advantage of increasing domestic incarceration rates and the need to house and secure an ever growing number of inmates.…

    • 756 Words
    • 4 Pages
    Satisfactory Essays
    Read More
  • Satisfactory Essays

    Unit 10 Assignment 1 Examine Real World Applications of Security Standards
    • 493 Words
    • 2 Pages

    Unit 10 Assignment 1 Examine Real World Applications of Security Standards

    NT 2580 Introduction To Information Security Teacher : Mr. Timothy Tacker Unit 10 Assignment 1 Examine Real-World Applications of Security Standards ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++…

    • 493 Words
    • 2 Pages
    Satisfactory Essays
    Read More
  • Better Essays

    Cmgt 441 Homeland Security Research Paper
    • 1317 Words
    • 6 Pages

    Cmgt 441 Homeland Security Research Paper

    A cyber-attack is a deliberate exploitation of computer systems, technology-dependent enterprises, and networks (Janssen, n.d.). There are 11 potential security threats thought to be the top security threats for 2013; targeted attacks and cyber-espionage, hacktivism, nation-state-sponsored cyber-attacks, legal surveillance tools, clouds and malware, privacy threats, fake security certificates, ransomeware spreading globally, MAC OS malware, mobile malware, and vulnerabilities and exploits (Davis, 2013). Symantec’s 2013 Internet Security Threat report finds that there was a 42% increase in targeted attacks in 2012…

    • 1317 Words
    • 6 Pages
    Better Essays
    Read More
  • Satisfactory Essays

    Safeguarding Case Study
    • 378 Words
    • 2 Pages

    Safeguarding Case Study

    Therefore, it is Chris’s duty as a teaching assistant to follow the procedures regarding suspected abuse.…

    • 378 Words
    • 2 Pages
    Satisfactory Essays
    Read More
  • Good Essays

    Safeguarding Case Study
    • 615 Words
    • 3 Pages

    Safeguarding Case Study

    1. Leroy may be the victim of neglect as there is evidence that his parents are persistently failing to meet his basic physical and psychological needs and that this is likely to cause impairment to his health and development. HM Government (2006). Maccoby and Martin (1983) assert that a child may suffer neglect if that child’s needs form a low priority within the family unit. In addition to neglect, Leroy may well be the experiencing emotional abuse. Emotional abuse involves the “persistent maltreatment of a child such as to cause severe and persistent effect on their emotional development.” HM Government (2006:39). This may include conveying a feeling of worthlessness; being unloved; inappropriate expectations of a child’s ability or level of responsibility, which are out of kilter with that child’s age and stage and being witness to the maltreatment and abuse of others.…

    • 615 Words
    • 3 Pages
    Good Essays
    Read More
  • Satisfactory Essays

    The Impact of Weak System Security- Unit 7, M1
    • 744 Words
    • 2 Pages

    The Impact of Weak System Security- Unit 7, M1

    Weak system security can cause massive problems for an organisation. Holes in security can allow hackers to gain access to an organisations data or its customers’ personal information etc. Once this happens, drastic problems can be caused for the organisation; anything from severe loss of earnings, loss of customers or even bankruptcy if the problem is not taken under control quickly. I will talk about some of the products of having weak system security, and the problems that these can cause.…

    • 744 Words
    • 2 Pages
    Satisfactory Essays
    Read More
  • Good Essays

    Safeguarding Framework Analysis
    • 1171 Words
    • 5 Pages

    Safeguarding Framework Analysis

    Working in partnership in Safeguarding children is the action we take to promote the welfare of children and protect them from harm, this is everyoneâ€TMs responsibility. Everyone who…

    • 1171 Words
    • 5 Pages
    Good Essays
    Read More
  • Good Essays

    Close The Gap Analysis
    • 354 Words
    • 2 Pages

    Close The Gap Analysis

    Malcolm Turnbull, Australia’s Prime Minister, admits that Close the Gap, a program aimed to reduce inequality between Aborigines and nonnative Australians, has had mixed progress at best. Child mortality rates have fallen and high school graduation rates have risen, but figures contrasting life expectancy and employment between the groups aren’t satisfactory. The Australian government has been criticized for weak engagement with Aboriginal communities and misguided spending, and barriers of language, culture, and physical distance make healthcare difficult to attain. A report detailing this inadequacy urges the major Australian political parties to prioritize Aboriginal healthcare…

    • 354 Words
    • 2 Pages
    Good Essays
    Read More
  • Better Essays

    Alm Gap Analysis
    • 1033 Words
    • 5 Pages

    Alm Gap Analysis

    Gap analysis is a technique of asset-liability management that can be used to assess interest rate risk or liquidity risk. Implementations for those two applications differ in minor ways, so people distinguish between interest rate gaps and liquidity gaps. This article discusses both.…

    • 1033 Words
    • 5 Pages
    Better Essays
    Read More
  • Better Essays

    Acievement Gap
    • 1079 Words
    • 5 Pages

    Acievement Gap

    Why is the “achievement gap” important to understand within a multicultural framework? What are some of the problems with the term “achievement gap?” These questions will be answer in this essay describing multicultural education and how defining the term “achievement gap” and understanding it aids in narrowing the gap. In the multicultural framework of education, “achievement gaps” have been focused on the gap between black and white students. But as the U.S. became a “melting pot” for so many other ethnic populations, “achievement gaps” was seen between whites and other ethnic groups such as Hispanics. The measurement of the achievement gap will also be reviewed. There is no denying that “achievement gap” exists but to what capacity is what this essay hopes to explore.…

    • 1079 Words
    • 5 Pages
    Better Essays
    Read More
  • Powerful Essays

    Security Measures Must Be Commensurate With The Threat Case Study
    • 1598 Words
    • 7 Pages

    Security Measures Must Be Commensurate With The Threat Case Study

    While both of the above elements of the question complement each other, without understanding the main purpose of security management, which is in itself is multifaceted in nature, and ideally to be successful should be employed throughout all aspects of a business, as can be seen…

    • 1598 Words
    • 7 Pages
    Powerful Essays
    Read More
  • Powerful Essays

    Gap Analysis: Riodoran
    • 1703 Words
    • 7 Pages

    Gap Analysis: Riodoran

    References: Bertone, S., & Leahy, M. (2001). Chapter 11: Globalization and Diversity Management. In , Globalization, Employment & the Workplace (pp. 207-238). Taylor & Francis Ltd / Books.…

    • 1703 Words
    • 7 Pages
    Powerful Essays
    Read More
  • Satisfactory Essays

    Preventing Security Breaches Collaborative Summary
    • 499 Words
    • 2 Pages

    Preventing Security Breaches Collaborative Summary

    There are countless steps that can be taken to safeguard a company’s data systems against intrusions; however, our collaborative discussion stressed three. Our team reviewed the benefits of updating POS…

    • 499 Words
    • 2 Pages
    Satisfactory Essays
    Read More
  • Satisfactory Essays

    LAB 4 Using Group Policy Objects And Microsoft Baseline Security Analyzer
    • 386 Words
    • 2 Pages

    LAB 4 Using Group Policy Objects And Microsoft Baseline Security Analyzer

    Analyzer (MBSA) to assess its security state, and you examined the results of the Microsoft…

    • 386 Words
    • 2 Pages
    Satisfactory Essays
    Read More
  • Good Essays

    Policy Monitoring and Enforcement Strategy: The SANS Institute
    • 577 Words
    • 2 Pages

    Policy Monitoring and Enforcement Strategy: The SANS Institute

    References: Johnson, Rob. with Merkow, Mike. Security Policies and Implementation Issues. First Edition. Copyright © 2011by Jones & Bartlett Learning, LLC, an Ascend Learning company…

    • 577 Words
    • 2 Pages
    Good Essays
    Read More

Related Topics