Assignment - Information Security Report
Assignment Description:
John Portland was recently hired as the Chief Information Officer (CIO) of ABC Company. ABC Company is a telecommunications company which provides switches to internet providers. ABC Company's secrets are the technical innovations developed to make the internet signals travel faster. Although patents exist on some of the technologies, there are some software and engineering concepts ABC must keep from its competitors.
The CIO is busy with so many other projects (server virtualization, network contracts, major ERP system rollout, acquisition of a major competitor, and incorporating the competitor's IT into ABC's IT), but he understands the importance of information security. He is concerned that he has not found adequate security policies and procedures within ABC to protect the "crown jewels" of ABC. The current security manager (Emily Pillar) is a very good technical network engineer but she does not understand the full scope of information security.
John became even more concerned when he was told the legal department is worried about potential intellectual property theft as ABC is starting to manufacture switches in China and India.
The Internal Audit department has criticized the IT organization for not developing adequate business continuity planning and disaster recovery plans.
Based on discussions with department heads in Marketing, Sales and HR, John is convinced that the overall security awareness at ABC is very low. There is no required information security training or annual certification for employees.
The CEO, Abdallah Iman, who is also John's supervisor, is expecting John to implement a robust information security program throughout ABC Company.
John is too busy with other priorities and asks you to help him get started on the road to implement an effective security program at ABC Company.
Your assignment is to educate John on some of the key characteristics of a good security program. Based on the topics discussed during the class (6 key Security Characteristics: Aligned, Enterprise Wide, Continuous Proactive, Validated, and Formal) prepare a report (No more than 800 words) on how you would help John.
Feel free to include assumptions in your report if needed to make the report realistic and professional.