The Rookie Chief Information Security Officer

SEC 402 Week 10 Term Paper – The Rookie Chief Information Security Officer

This assignment consists of five (5) parts:

Part 1: Organization Chart

Part 2: Request for Proposal (RFP) Plan

Part 3: Physical Security Plan

Part 4: Enterprise Information Security Compliance Program

Part 5: Risk Management Plan

 

Imagine that you have been recently promoted to serve as Chief Information Security Officer (CISO) for a Fortune 500 organization. This organization has known brand products across the world and expects top-secret methods for safeguarding proprietary information on its recipes and product lines. The Board of Directors request that their information security strategy be upgraded to allow greater opportunities of secure cloud collaboration between suppliers and resellers of their products. Another concern they have is the recent number of hacktivist attacks that have caused the network to fail across the enterprise. Their concern extends to making sure that they have controlled methods for accessing secured physical areas within their various regional facilities.

 

For your new position, you will be responsible for developing standards, methods, roles, and recommendations that will set the new IT security path for the organization. The existing organization has limited experience in supporting an enhanced level of IT security; therefore, you may need to outsource certain security services.

 

Additionally, you may create and / or assume all necessary assumptions needed for the completion of this assignment.

 

Write an eight to twelve (8-12) page paper in which you provide the following deliverables:

 

Part 1: Organization Chart

1.     Use Visio or an Open Source alternative, such as Dia, to:

a.     Create an organization chart in which you:

i.        Illustrate the roles that will be required to ensure design, evaluation, implementation, and management of security programs for the organization.

ii.        Within your organizational chart, clearly identify the reporting structure for roles such as IT Security Compliance Officer, Security Manager, CIO, CISO, IT Security Engineer, Privacy Security Professional, and IT Procurement Specialist.

iii.        List the types of resources required to fulfill the each forensic duty of the organization below each of the roles you identified.

iv.        Align your organization chart to reflect the Department of Homeland Security (DHS) Essential Body of Knowledge’s three (3) areas of information security: physical security professional, privacy professional, and procurement professional. Provide comments and comparisons on how your organizational chart fosters these three (3) values.