Chapter

Information Security Hub – Page 7

Guide to IT Governance for IT Security

This IT Governance guide provides a template to understand and strengthen controls over information technology. It focuses on IT Security and related areas.

January 6, 2014

IT Security Guide For SME

This document provides practical guidance to information technology managers on securing the small and mid size enterprise. It introduces the key risks and threats to security and how to mitigate and manages them.

June 24, 2013

Introduction to IT Security Governance

This presentation introduces information technology governance and information security governance and key concepts related to them – what is IT governance? what is IT security governance? what is the IT security Governance framework? what are some leading practices in implementing IT security governance?

June 24, 2013

Guide for IT Security Controls Assessment

This document provides guidance on assessing security controls in information systems and organizations. Security controls assessment is the primary mechanism to verify that information systems and organizations are meeting their stated security goals and objectives. (400 Pages) The assessment results provide senior managers with: Evidence about the effectiveness of security

June 24, 2013

IT Security Self Assessment Guide

Explore this IT Security Self-Assessment Guide, an invaluable resource for IT leaders aiming to enhance their cybersecurity strategy. With five levels of standardized security status and 17 critical control areas, this guide helps you understand your current security posture and identify areas for improvement. Strengthen your defenses and secure your digital assets today.

June 24, 2013

Prioritizing IT Security Investments

This document provides guidance on integrating IT security and IT Investment Management processes. Applying funding towards high-priority security investments supports the objective of maintaining appropriate security controls, both at the enterprise-wide and system level, commensurate with levels of risk and data sensitivity. This paper introduces common criteria against which managers can prioritize security activities to ensure that corrective actions are incorporated into the capital planning process to deliver maximum security in a cost-effective manner. (70 Pages)

June 24, 2013

IT Security Metrics Guide

This document provides guidance on how an organization, through the use of metrics, identifies the adequacy of in-place security controls, policies, and procedures. It provides an approach to help management decide where to invest in additional security protection resources or identify and evaluate nonproductive controls. It explains the metric development and implementation process and how it can also be used to adequately justify security control investments. The results of an effective metric program can provide useful data for directing the allocation of information security resources and should simplify the preparation of performance-related reports. (100 pages)

June 24, 2013

File Sharing and Collaboration in the Enterprise – Mitigating the Security Risks

This paper discusses that to prevent data breaches, enterprises should first conduct a thorough audit of their file sharing practices. It contends that to ensure data security and compliance for the organization, one needs to know all data security risks and how to mitigate them. It is important to implement best practices for secure file sharing, so employees can continue to collaborate with internal and external parties. It concludes that implementing a secure file sharing solution minimizes the risk of data breaches and helps ensure compliance with internal policies and industry regulations.

March 6, 2013
Cybersecurity Collection41 Cybersecurity Trends Collection18 Implementation of Information Security Collection1 Information Security Best Practices Collection2 Information Security Frameworks Collection1 Information Security Governance Collection33 Information Security Guides Collection4 Information Security Samples Collection1 Information Security Templates Collection1 Information Security Trends Collection16 ISO 270001 Network Cybersecurity1
CIO Portal