ipl-logo

Wig1 Information Security Plan

1390 Words6 Pages

Information Security Plan
Introduction
Purpose
Information is critical to WigIT’s functionality and needs to safeguarded. This protection must be uniform, consistent and cost effective due to information existing in many forms. Information can be on paper, electronic, and verbal. Information Security is the practice of preventing unauthorized access, use, disclosure, destruction, modification, or disruption and ensuring that the security of all information from threats. (Information Security Resources, 2017) This plan intends to establish how WigIT will achieve information protection from information threats so that it can guarantee business continuity. WigIT’s information security program will be achieved by implementing controls, including …show more content…

It provides guidance on the importance of confidentiality, integrity and availability of information, regardless of how the information is communicated or held. WigIT’s developed risk management strategies will be implemented immediately and personnel will assist in identifying all threats and vulnerabilities. The WigIT information security incident response plan ensures compliance with all applicable laws, regulations and policies. Finally, because information security is vital to safeguard security awareness and training programs will be established immediately and will be completed annually.
WigIT is responsible for mitigating and protecting the confidentiality, integrity and availability of all information. The unauthorized use, modification, deletion, or disclosure of information may compromise the integrity of WigIT and violate individual privacy rights. It is the responsibility of all information owners to ensure confidentiality of personally identifiable information (PII), integrity and availability of data held by WigIT to include IT facilities, software, ubiquitous devices and equipment owned or leased by the WigIT …show more content…

Information owners are responsible for classifying, maintaining controls, authorizing access, monitoring compliance with WigIT security policies and standards, managing risk, and protection of the information at WigIT.
Security Program
WigITs and its employees are responsible for complying with the provisions of security policies, standards, and security initiatives that will be enforced with the same standards. WigIT’s incident response team will handle all information security incidents. The security program is responsible for information classification, control approvals and access privileges, periodic reclassification, and risk reviews. Information security is vital to business continuity and the objective avoiding or mitigating risk.
Risk Management
This process identifies, assesses, and takes steps to reduce risk to an acceptable level. Risk management is critical for WigIT to successfully implement and maintain a secure

Show More
Related

Nt1310 Unit 3 Pest Analysis

131 Words | 1 Pages

1. Policies governing the network insecurities which include Email and communications policy, Remote Access Policy, BYOD Policy and Encryption policy 2. User accounts management through training and assigning of user roles depending on their access levels to information in the organization. 3. Setting up workstations and assigning every user a workstation.

Read More

Nt1330 Unit 3 Information Security Risk Management

223 Words | 1 Pages

The Information Security Manager reports in their capacity to the CEO. Company officers, executives, directors, employees, contractors and third party service providers cooperate and work with the Information Security Manager to ensure the protection of customer’s non-public information and Licensee’s Information Assets. Policies, such as Enterprise Antivirus Program, Network Access, Software Development Security Standards, Physical Security, Vendor Manangmenet Ativirus, Mobile Computing/Remote Access, Inromation Security Risk Assessment, Social Media, Data Loss Prevention, and Secuiryt Incident Response Policies have been implemented to protect customer’s non-public personal information and company Information

Read More

Hcr 220 Week 3 Term Paper

449 Words | 2 Pages

Procedures and policies required to address this are: • Access control using unique user Identification protocols, emergency access, procedures, timed auto logoff, and encryption and decryption mechanisms. • Auditing system that ensures that the IT system with the PHI is being recorded and examined. • Having an IT system that is dependable and protects PHI from alteration and being destroyed. • Making sure that the person accessing the PHI has the proper proof to identify who they are and are authorized to access.

Read More

Acct 391 Unit 1 Business Security And The Future

1670 Words | 7 Pages

Marques Underwood INSS 391 Security and the Future With the transition of companies leaning towards advancing through the usage of big data, cybersecurity and the trends in technology are creating an increase in threats. The goal is to protect the databases and devices used at these companies before they are hacked and compromised for unwanted reasons. We’ll see the general concerns with security in the IT field, and steps that specific companies are taking to prevent and adopt to the landscape of the future in security. Devices are increasing at a rapid pace these days, meaning the more data is being expanding.

Read More

Information Security Standards FIPS 200 Week 2

1008 Words | 5 Pages

• Accreditation, certification, and security assessment-The security controls of the firm should be developed, assessed, and plan of actions implemented periodically. The program of activities collects deficiencies and eliminates vulnerabilities. • Risk assessment- the risk of individuals, assets and operations resulting from system operation and the associated storage processing or transmission of information, is periodically assessed. Areas of

Read More

Cis 4680 Assignment 1

1272 Words | 6 Pages

Using the framework presented in the course textbook, draft a sample issue-specific security policy for an organization. An issue-specific security policy instructs an organization to securely use a technology system. It provides detailed and targeted guidance to employees. The ISSP instructs the fundamental technological philosophy of the organization.

Read More

Data Room Risk Assessment Paper

891 Words | 4 Pages

An example would be prox card entry with security pin to unlock the doors. Along with electronic security access into the data room, a security staff will need to be formed that will be responsible for monitoring the data room and manage assigning access into the data room. Internal Server and Desktop Security Policies A risk assessment will need to be conducted in order to identify all locations where sensitive and classified information is

Read More

VA Information Security Essay

1572 Words | 7 Pages

Introduction “VA’s mission is to promote the health, welfare, and dignity of all veterans in recognition of their service to the nation by ensuring that they receive medical care, benefits, social support, and memorials.” (Information Security: Veterans Affairs Needs to Resolve Long-Standing Weaknesses, 2010, p.1) The VA information system security program (ISSP) aims to protect the confidentiality, integrity and availability (CIA) of the VA’s information systems and business process. This program provides information of plans, policies and procedures to protect the VA’s system user’s privacy data. Also according to the Department of Veterans Affairs: Information Security Program (2007) this program provides a detailed list of the security

Read More

Information Security Document For General Hospital Essay

1813 Words | 8 Pages

Classification of Assets and Access Control Sections of the Information Security Document for General Hospital Michelle M. Fulop University of Cincinnati HI7030 Module 3 Section 3 March 25, 2018 Classification of Assets and Access Control Sections of the Information Security Document for General Hospital Introduction After reviewing and identifying the potential risks identified in the business operations of General Hospital, security controls can be implemented to regulate the user’s view and application of organizational information resources. Selectively restricting practices, and who has access to those practices, ensures that the hospital complies with regulatory mandates and that the management of information systems is responsibly upheld. Access management in healthcare is crucial with the increased incidence of information security breaches and illegal and fraudulent access of ePHI. In order to maintain a high level of adherence to industry standard regulations, user roles and access privileges must be

Read More

Information Security Policy Paper

907 Words | 4 Pages

Should a threat actor compromise an organization, the organization must have ways to respond to the incident effectively. The threat must be isolated, then mitigated, and the policy likely adjusted to deal with how the threat occurred (Baskervill, Straub, & Goodman, 2008). Other components of an information security policy must outline backups of systems, email usage, wireless, physical security, as well as how third parties should access the system. Policy

Read More

Information Technology Strategic Plan Paper

1395 Words | 6 Pages

The purpose of the personnel is to enable alignment of the plans, as well as operations of the information systems with the mission, vision, and strategic goals of the company. The practices include budgeting, strategic planning, and decisions for the information-system (Whittington, 2014). The CIO should work with other senior leaders in different aspects of the organization, thus, the need to show good communication and planning. Finally, there is a need for the information-security officer in charge of the integration of the information security policies while overseeing implementation of the policies. The objective of the officer is to ensure that the information remains valid, available, and secure against the potential internal and external

Read More

Martin Luther And Corruption Of The Protestant Reformation

125 Words | 1 Pages

The Protestant Reformation was sparked by Martin Luther and his 95 Theses. Martin Luther exposed the wrong doings and the corruption of the catholic church. The reason of reformation being sparked was clerical immorality, pluralism, simeny, ignorance. The church officials were too powerful and ignorant The catholics believed the pope and church officials decided the interpretation of the bible. So Luther spread the belief of self interpretation.

Read More

Political Factors Affecting Ulta Beauty

913 Words | 4 Pages

For operational purposes, the company collects and stores confidential information about their customers, employees, suppliers, and vendors. For purposes of their rewards program, the company collects sensitive and confidential consumer information. Although security measures and information technology systems have been put in place to ensure secure transmission and storage of confidential information, security breaches, computer viruses, or even human error can occur. Any of these events could cause data to be lost or stolen, as well as disclosed and used with malicious intent. Such occurrence could lead to litigation, fines, increased security costs, and damage to

Read More

1.2 Explain How Legal Requirements And Codes Of Practice Inform Practice In Handling Information

871 Words | 4 Pages

2.2: Describe practices that ensure security when storing and accessing information. • Keeping passwords on computer: this secures important information from getting accessed without authorisation. • Keeping files locked away: this only allows the people holding the key to access important files. • Coded doors: access is only permitted to the room if the person knows the code. • Putting information away: once the information is no longer being used, it is important to make sure that it’s locked away

Read More

IT Infrastructure Audit Case Study

2512 Words | 11 Pages

· Ensureing that the IT infrastructure guarantees availability and reliability of the available

Read More

More about Wig1 Information Security Plan

Related Topics

Open Document