Information Security Maintenance

Information Security and Maintenance

Information Security Maintenance

Objectitives:

Understand the need for ongoing maintenance of the information security program
List the recommended security management models
Define a model for a full maintenance program
Identify key factors involved in monitoring the external and internal environment
Describe the process of aquiring, analyzing and maintaining potential evidentiary material

Describe how planning, risk assessment, vulnerability assessment, and remediation tie into infofrmation security maintenance
Explain how to build readiness and review procedures into information security maintenance
Define digital forensics and describe the management of the digital forensics function

Introduction

After sucessfully implementing and testing new and improved information security profile, an organization may beginfeeling more confident about the level of protection it is providing for its information assets. But not so fast: The threats that were originally assessed have most likely changed and new priorities have emerged. Developing a comprehensive list of all possible factors in an organization's environment is an important goal to work towards.