Q1: Information security and compliance

Due to the significant dependence on IT in modern organisations, the security of data, information and systems is of vital importance. Today, key institutions pertaining to health, education, banking and more are globally networked and, through the catalyst of the Internet, subject to frequent cyberattacks, information leaks and vulnerabilities. As you saw in your Lecture Notes this week, user information is a sought-after commodity, with hundredsofthousands, even millions, of pieces of sensitive information being compromised in recent years. As such, organisations must take great care in protecting information. Nonetheless, while governments have implemented regulations for information security, compliance is still a challenging undertaking for many organisations.

On an internal level, efforts organisations undergo to comply with information security regulations and standards increase both project costs and development times. However, there are several other issues to consider to remain secure. For example, just as organisations improve technology, cyberattackers do as well, meaning organisations must remain privy to the latest security measures. For this Discussion, you will summarise the major information security and compliance issues that organisations face. You will then evaluate the resources, methods and approaches that can help make organisations more secure.

To complete this Discussion

Post: Create an initial post in which you take a position on the resources, methods and approaches that can help make firms more secure. In your post, summarise the top 3-5 major information security and compliance issues that organisations face. Also, identify and summarise the resources, methods and approaches modern organisations use to improve information security. Based on the major information security and compliance issues that organisations face, evaluate these identified resources, methods and approaches.