ipl-logo

Iso9001 Unit 1 Business Context

702 Words3 Pages

1 Organisation Context (for examiner) The organisation provides consultancy services and oversees the implementation of IT programmes in Government. The programmes are aimed to better public service delivery for citizens and businesses. To achieve this objective, we either offer software development services or act as a broker for 3rd party vendors to provide commercially off the shelf products. The organisation additionally provides data centre hosting services and provisions the infrastructure needed to execute ICT services to Government. The organisation works as an active partner to government, in the objectives of promoting and encouraging further use of ICT in society. The organisation was established 26 years ago and while this may be …show more content…

2 Purpose The purpose is to explain the need for an Information Governance Policy and to outline further benefits that this will bring to the organisation. The policy has been aligned to the organisational strategy and in this respect wold need to be further updated as the stagey and business needs of the organisation evolve. The changes to the current practices are outlines in the paper while the resources required and related costs are explained in this paper and detailed costings are provided in Annex 3. 3 Current State of play The organisation is the proud holder of both ISO9001 and ISO27001 accreditations which have helped the organisation better its standing in the ICT industry. Both standards require a continual improvement approach and this mandates that as an organisation we must continually seek to ameliorate our procedures and processes to ensure we reap the best value from information held by the organisation and treat it like a valuable asset. It is therefore being proposed that an information governance policy is implemented across the organisation to better our posture to corporate …show more content…

The introduction of ISO27001, in response to a publicly know security breach, has further provided a framework of controls that safeguard the integrity, confidentiality and availability of the information. It has additionally re-established the confidence in the organisation to safe guard its information assets and those that it is entrusted to host against unauthorised intrusion. As part of the process of implementing the ISO standards we have established 89 policies and 90 procedures in total and although not all may relate directly to ISO 9001 and ISO 27001 they are a sign of the established maturity of the organisation and the effort made towards establishing governance within. Amongst these of key importance we have

Show More
Related
149 Words | 1 Pages

The security controls, policies, procedures, and guidelines were tested using the security testing plan that was evaluated by a security team to correct and report flaws in the system design. The only major flaw doesn’t relate to the network or the physical system itself, but instead policies and procedures seem to be at the highest risk. Policies and procedures explain that the chain of custody during media transportation and disposal should be logged and tracked impeccably. I believe putting stronger controls in place for the transportation of media would lower the risk of exposed confidentiality tremendously. I believe each device used to transport should be trackable at any given time, rather than just by logs.

Read More
131 Words | 1 Pages

1. Policies governing the network insecurities which include Email and communications policy, Remote Access Policy, BYOD Policy and Encryption policy 2. User accounts management through training and assigning of user roles depending on their access levels to information in the organization. 3. Setting up workstations and assigning every user a workstation.

Read More
223 Words | 1 Pages

The Information Security Manager reports in their capacity to the CEO. Company officers, executives, directors, employees, contractors and third party service providers cooperate and work with the Information Security Manager to ensure the protection of customer’s non-public information and Licensee’s Information Assets. Policies, such as Enterprise Antivirus Program, Network Access, Software Development Security Standards, Physical Security, Vendor Manangmenet Ativirus, Mobile Computing/Remote Access, Inromation Security Risk Assessment, Social Media, Data Loss Prevention, and Secuiryt Incident Response Policies have been implemented to protect customer’s non-public personal information and company Information

Read More
550 Words | 3 Pages

1. Please provide up to 3 examples of computer code that you have written to carry out data management, reporting or analysis. This can include programs written in SAS, R, or another programming language or queries written in SQL or another query language. While working in the Quarterly Census of Employment and Wage Unit, I have worked primarily with SQL procedure editor software.

Read More
1736 Words | 7 Pages

Business Unit 1: The Business environment Differences in types of business activity for Port of Felixstowe and the Ipswich Transport Museum Task 1a Types of business activity Port of Felixstowe The Port of Felixstowe is a global and national business that is set up for profit. It is a private company in the tertiary sector and this is because it is a service. The service that it offers is that it transports containers all around the world. The port employs over 2500 people and they all do their separate roles for the everyday running from the business.

Read More
1008 Words | 5 Pages

The standards are compared and contrasted with those of FIPS 200 and ISO 27002. ISO 27002 code of practice for information security that are common throughout the world as standards for information

Read More
1272 Words | 6 Pages

Using the framework presented in the course textbook, draft a sample issue-specific security policy for an organization. An issue-specific security policy instructs an organization to securely use a technology system. It provides detailed and targeted guidance to employees. The ISSP instructs the fundamental technological philosophy of the organization.

Read More
1131 Words | 5 Pages

• take advantage of Information Technology to further corporate gains. • gain operational excellence by availing of technology. • make sure that the risk around computing is monitored correctly. • make best use of IT that has been heavily invested in. • remain compliant with any contracts, regulations and other compliance laws.

Read More
1164 Words | 5 Pages

1.2.3 Strategies • Review IT organizational structure • Review IT policies and

Read More
1350 Words | 6 Pages

Additionally, information security policies will help to minimize risk and ensure that security incidents are responded to adequately. Moreover, Information security policy will help an organization to define the firm’s attitude towards information, declare that the company’s information is considered to be an asset and property of the organization, and that the organization’s assets should be protected from unauthorized access, modification, disclosure, dissemination, and destruction. However, it is important to understand that information security policies are not guidelines or standards, nor are they to be considered procedure and controls (Bragg, 2002).  More accurately, information security policy should serve as the blueprints for an overall security program and define what is being protected in order to ensure the implementation of proper controls.   Moreover, steps should be taken to ensure that information security policy never conflicts with state or federal laws, can stand up in court if ever challenged, and be properly administered through dissemination and documented acceptance.

Read More
697 Words | 3 Pages

Alternate Title Putting the "Information" Back in Information Technology Business leaders need timely, accurate information if they are to make wise decisions. Providing this information has been the responsibility of the IT department since room-sized servers operated by MIS professionals first began producing financial reports. Today, however, IT professionals must juggle many different responsibilities that reflect the numerous changes in the business world as well as advances in technology. Digital transformation, the Internet of Things, smart devices and the explosion of mobile have revolutionized the function of the IT department. Despite the many changes, IT has not been relieved of the responsibility for providing managers with critical,

Read More
435 Words | 2 Pages

For instance, AS8015-2005, Australian Standard for IT Governance. It was adopted as ISO/IEC 38500 in May, years 2008. ISO/IEC 38500-2008, IT governance gives the framework for effective IT governance to assist the organization to fulfill and understand the organizations regulatory, legal, and ethical obligations from different sizes of organizations, inclusive of both public and private organizations, non-profit organizations, and government entities. It gives the principles to guide the organizations directors for efficient, effective, and acceptable use of IT in their organizations. Besides, Control Objectives for Information and related Technology, COBIT is the world leading IT governance and control framework.

Read More
989 Words | 4 Pages

The first and one of the most important things

Read More
930 Words | 4 Pages

Hence, the implementation of IG can help the organisation use the value of information to reduce risk and settle legal demands. Information governance reference model (IGRM) as a basic to build a strategy. () stated that IT play the different significant role within the IG program. The IGRM model designed by EDRM, which provides theoretical Framework to encourage unified IG, as well as advocate policy and process integration for information stakeholders. Especially in, IT, Business, Security and Records and information

Read More
887 Words | 4 Pages

Worth noting is that, IT governance and its mechanisms such as; IT organizational structure, governance committees, approvals and budgeting processes (Weill, 2004) can be found in every enterprise but the only difference is that, enterprises with an effective proactive governance also have in place active IT governance mechanisms which enables their appropriate behavioural patterns to be fitted into the organization’s goals, strategy, values, norms, mission, and culture, to crown it all successful. Therefore from the above description of IT governance one can now easily pin-point the key issues related to an effective IT governance mechanisms, highlighted in Galliers & Leidner chapter 12, (2009, p. 303-4) by Weill, (2004) as explained below:

Read More

More about Iso9001 Unit 1 Business Context

Related Topics

Open Document