Project Report Outline: 1. Cover page Title Students name 2. Executive Summary Summary of the InfoSec plan and recommendations 3. Organization Background/Description Describe the organization and clearly define the IT infrastructure as well as the challenges it faces in terms of laws and regulations it has to adhere to and standards that need to be met. Provide the Organizational Chart (Place IS and InfoSec Management in the organizational hierarchy) 4. Source Selection and Rationale What sources (templates) were chosen and what is the reasoning for your choice(s) 5. Enterprise Information Security Plan (EISP) Overview Discuss the organizational philosophy on information security and the structure of InfoSec department and individuals who fulfill InfoSec roles. Articulate security responsibilities for all entities of the organization Including contractors and business partners Information Security Strategy Discuss the Purpose of the InfoSec program and the Organizational Security Strategy Statement Define the model standard used (if one is used) Risk Management Discuss how the organization deals with and identifies risks Conduct risk analysis/assessment to identify information assets, the vulnerabilities of those assets, and identify baseline controls Contingency Planning Discuss how the organization prepare for, detect, react to, and recover from threatening events Provide the BIA, IR, and DR plans SETA Program Include the definition and purpose of the SETA program Describe the level of education, training and awareness Describe how security education, training and awareness will be disseminated throughout the organization Issue-Specific Security Policies (ISSPs) System-Specific Security Policies (SysSPs) 6. References Use APA format, both in-text and reference list
The post the InfoSec plan and recommendations appeared first on My Assignment Online.