Know how to manage information security policies.
Know how to manage information security policies.
Know how to manage information security policies.
Explain the importance of strategic alignment
Prepare a report on how an organization achieves ISO 27001 certification.
Research how many organizations are currently ISO 27001 certified.
27002:2013 does not mandate specific controls but leaves it to the organization to select and implement controls that suit them. NIST Special Publications provide specific guidance. In your opinion, which approach is more useful?
ISO 27002 Supplier Relationships (Section 15) was added in the 2013 version. Why do you
think this section was added?
Choose one of the ISO 27002:2013 categories and explain why this domain is of particular
interest to you
At their respective websites, read the Mission and About sections of both the ISO (www.iso.org) and the NIST Computer Security Resource Center (http://csrc.nist.gov/).
Describe the similarities and differences between the organizations.
Find a recent news article relating to either hacktivism or a distributed denial of service (DDoS) attack. Summarize the attack.
Locate (online) a copy of the most recent Verizon Data Breach Incident Report. What percentage of cybercrimes are considered “opportunistic”?