Assume that you are asked to recommend the professional credit credentials for certain roles in infosec at a large organization. What is your recommendation for the credentials to be held by the CISO? How about for an infosec manager? What would be your recommended certifications for the senior technical staff? For the last question, pick 3 technical roles and know the job title and recommended credentials for each.

Assume that you are asked to recommend the professional credit credentials for certain roles in infosec at a large organization. What is your recommendation for the credentials to be held by the CISO? How about for an infosec manager? What would be your recommended certifications for the senior technical staff? For the last question, pick 3 technical roles and know the job title and recommended credentials for each.

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter5: Developing The Security Program

Section: Chapter Questions

Problem 2E

See similar textbooks

Similar questions

If you were offered the position of a CSO for a large organization, what reporting relationship would you want? Under what circumstances do you think a reporting relationship to the CIO is the best choice?
What is the most crucial phase in the SDLC, and can you back it up with at least two situations or examples??
Write a memo based on this scenario, use FIPS 199 (FEDERAL INFORMATION PROCESSING STANDARDS PUBLICATION) available online, and research on the functionality of an accounting system, Your company is purchasing a new accounting system. Evaluate the system using FIPS 199 to determine if it is a low, moderate, or high impact system. You need to provide justification for each of the three areas of evaluation for the level you select for that area and a statement of what the final level for the system has been determined to be. The evaluation of each of the three areas must include a list or explanation of what you considered in that area as the basis for your evaluation. Need research for the functionality of a typical accounting system, Include what you find that such a system does as part of the justification of what level the system is in each of the categories.
What is the most important phase of the SDLC, and can you support it with at least two circumstances or examples?
There are six stages of an audit which are planning, fieldwork/documentation, issue discovery, solution development, report drafting, and issue tracking. You have created an fictional IT company, describe your audit universe and goals for your audit of the IT company. For each stage, provide a paragraph describing how you will address it for the case study IT company. how will you accomplish each stage in your audit and what is the output from each stage. It should be a minimum of 200 words.
Whichever phase of the SDLC you believe to be the most important, explain your position with at least two examples or situations.
It's important to talk about the benefits of these two Network+ certification schemes. Include details about the Network+ certification training services, such as the course outline, the training format (CDs, computer-based training modules, and classroom teaching), the accreditation, the cost, and any applicable career assistance services. Choose one of the two certification services, and then briefly explain why you choose that particular service. Be sure to properly credit all of your sources.
I need a quick paper written pertaining to the below question. Someone noted in a blog that you are actually volunteering for your client by working on this project. (Of course, you did not volunteer since it is a required part of a required course which is Information System Analysis.) What is your reaction to the fact that you are doing volunteer work?
It is necessary to discuss the benefits of these two Network+ certification programs. Include information about the Network+ certification training services, such as the curriculum, training type (CDs, Computer Based Training modules, and classroom instruction), accreditation, prices, and available career aid services. Indicate your preference for one of the two certification services and provide a brief explanation. Make sure to cite all of your sources.
Assume you work for a company in Oklahoma with eight locations spread across the state. The company has never been impacted by a natural disaster or a cyberattack. The IT manager meets with the company president to explain the business continuity plan she is preparing. The president does not believe the company needs a BCP and does not want the time or expense spent on the project.(a) Do you believe a BCP is necessary in this situation? Why or why not?(b) What is the worst-case scenario if the company does not have a BCP in place?
North Hills College has decided to implement a new registration system that will allow students to register online as well as in person. As IT manager, you decide to set up a JAD session to help define the requirements for the new system. The North Hills organization is fairly typical, with administrative staff that includes a registrar, a student support and services team, a business office, an IT group, and a number of academic departments. Using this information, you start work on a plan to carry out the JAD session. Who would you invite to the session, and why? What would be your agenda for the session, and what would take place at each stage of the session? Why is the JAD session so important to the task.
What kind of reporting arrangement would you prefer if you were given the role of CSO at a major corporation? Is a connection with the CIO a good option in all cases, or just in certain situations?