{"id":13378,"date":"2024-02-26T20:50:07","date_gmt":"2024-02-26T20:50:07","guid":{"rendered":"https:\/\/www.writemyessays.app\/blog\/questions\/critical-evaluation-of-information-systems-security-policies-and-procedure-isspp-in-your-chosen-organization-must-be-an-iso27001-certified-and-nist-csf-with-security-maturity-level-4-and-propose-r\/"},"modified":"2024-02-26T20:50:07","modified_gmt":"2024-02-26T20:50:07","slug":"critical-evaluation-of-information-systems-security-policies-and-procedure-isspp-in-your-chosen-organization-must-be-an-iso27001-certified-and-nist-csf-with-security-maturity-level-4-and-propose-r","status":"publish","type":"questions","link":"https:\/\/www.writemyessays.app\/blog\/questions\/critical-evaluation-of-information-systems-security-policies-and-procedure-isspp-in-your-chosen-organization-must-be-an-iso27001-certified-and-nist-csf-with-security-maturity-level-4-and-propose-r\/","title":{"rendered":"Critical evaluation of Information Systems Security Policies and Procedure (ISSPP) in your chosen organization (Must be an ISO27001 certified and NIST CSF with security maturity level 4) and propose recommendations."},"content":{"rendered":"

General
\nInformation<\/span><\/u><\/b><\/p>\n

This course is
\nassessed through submission of an individual investigative report. Information Systems Security
\nPolicies and Procedure (ISSPP)<\/span> <\/b>establish guidelines for the
\napplication of information security controls within an organization. It
\noutlines what relevant stakeholders are expected to comply with while using
\ncompany information assets. With the help of strong policies and procedures, organisation
\ncan incorporate actions that are consistent, effective, and efficient. This
\nhelps combat security threats by creating proper awareness. Further. documented
\npolicies and procedures can also define how organisation incorporate and manage
\ntechnology in the corporate environment. You are required to investigate Information Systems
\nSecurity Policies and Procedure (ISSPP) documentation aligned to corporate
\nbusiness requirements relating to a company of mid-large size and demonstrate
\nyour information security knowledge.<\/span><\/span><\/p>\n

It is essential to meet below defined
\nlearning outcomes<\/span> in your study by understanding and critically
\nassessing the adequacy of key elements, which is relevant and appropriate for
\nthe course module. You are
\nexpected to submit 4000-word report \u201cintroduction to conclusion\u201d.<\/span> <\/span><\/p>\n

 <\/span><\/p>\n

Learning
\noutcomes addressed in this assignment:<\/span><\/u><\/b><\/p>\n

1.      <\/span><\/span><\/span><\/span><\/span>Analyse
\ninformation security objectives, risk management strategies, controls designed
\nand implemented to address security requirements.<\/span><\/i><\/b><\/p>\n

2.      <\/span><\/span><\/span><\/span><\/span>Critically
\ndiscuss how corporate security objectives are impacted by business, regulatory
\nand environmental constraints, and by relevant threats and vulnerabilities.<\/span><\/i><\/b><\/p>\n

3.      <\/span><\/span><\/span><\/span><\/span>Analyse
\nthe control requirements relating to the processing, transmission and storage
\nof data and information relating to emerging technologies such as Generative AI
\n& cloud computing.<\/span><\/i><\/b><\/p>\n

4.      <\/span><\/span><\/span><\/span><\/span>Evaluate
\nelements of best practices in in information security standards (ISO27001) and frameworks (NIST CSF, NIST SP 800-53, NIST SP800-37, NIST RMF).<\/span><\/i><\/b><\/p>\n


<\/span><\/i><\/b><\/p>\n

Expectations
\nof the assignment. <\/span><\/u><\/b><\/p>\n

Address above
\nlearning outcomes of the assignment by demonstrating your knowledge gained,
\ncompleting the Information Security module. Use the knowledge gained through
\nthe course (both direct and indirect learning), comprehensive literature survey and your own experience,
\nanalyse concepts\/issues relating to the context and produce a research-based
\nreport. You are also expected to develop your own arguments and analysis based
\non your knowledge and experience.<\/span><\/span><\/p>\n


<\/span><\/span><\/p>\n

Lecturer
\nTips: <\/span><\/u><\/b><\/p>\n

1.      <\/span><\/span><\/span><\/span>Chosen
\ncompany must have minimum 500 employees and must be certified with ISO27001
\nwith voluntary adoption of some of these NIST frameworks (NIST CSF, NIST SP
\n800-53, NIST RMF, NIST SP 800-37). Minimum security maturity level of the
\norganization must be level 4.<\/span><\/p>\n

2.    <\/span><\/span><\/span> <\/span><\/span><\/span><\/span>Must
\ncarried out Interviews from 3 personnel who drives business such as CISO, CFO,
\nHead of Information Security or Head of IT, etc to get their opinion on what\u2019s
\nthe current status of ISSPP and how far it satisfies the organizational strategic
\nobjectives. Annual Information Security budget allocations APRX as per CFO.<\/span><\/p>\n

3.     
\n<\/span><\/span><\/span><\/span>Policies
\nand procedures> ISMS (ISO27001)> Standard Operating Procedures (SOP)> Roles
\n& Responsibilities (RASI Matrix Table)<\/span><\/p>\n

4.     
\n<\/span><\/span><\/span><\/span>Add
\nNon-Conformity Records (table) reported during previous years and what measures
\nthat company has taken to reduce it gradually. <\/span><\/p>\n

5.     
\n<\/span><\/span><\/span><\/span>Measuring
\nmetrics for policies and period: annually, by annually, quarterly. KPIs, KGIs<\/span><\/p>\n

6.     
\n<\/span><\/span><\/span><\/span>Accountability
\nfor key processes (Incident management process, Asset management process,
\nChange management process, Risk management process, etc)<\/span><\/p>\n

7.     
\n<\/span><\/span><\/span><\/span>Risk
\nmanagement process, Risk registrar, Residual risks in the organisation.<\/span><\/p>\n

\n

8.     
\n<\/span><\/span><\/span><\/span>Use graphs,
\ncharts and tables to save the word count.<\/span><\/p>\n

 <\/span><\/p>\n

Report structure
\n(Mandatory sections): <\/span><\/u><\/b><\/p>\n

1.     
\n<\/span><\/span><\/span><\/span>Introduction
\n<\/span><\/p>\n

Company, Industry background, description relevant to the given area<\/span><\/p>\n

2.     
\n<\/span><\/span><\/span><\/span>Justification
\nfor selecting the company and feasibility of it.<\/span><\/p>\n

3.     
\n<\/span><\/span><\/span><\/span>Identification
\nof a clear information security strategy\/ plan<\/span><\/p>\n

4.     
\n<\/span><\/span><\/span><\/span>Analysis<\/span><\/p>\n

5.     
\n<\/span><\/span><\/span><\/span>Discussion<\/span><\/p>\n

6.     
\n<\/span><\/span><\/span><\/span>Recommendations<\/span><\/p>\n

7.     
\n<\/span><\/span><\/span><\/span>Conclusion<\/span><\/p>\n

 <\/span><\/p>\n

Report Formatting<\/span><\/u><\/b><\/p>\n

 <\/span><\/b><\/p>\n

\u00a7  <\/span><\/span><\/span><\/span>Paper Size                          <\/span>: <\/span>A4<\/span><\/span><\/p>\n

 <\/span><\/p>\n

\u00a7  <\/span><\/span><\/span><\/span>Word Count                       <\/span>:
\nIndividual Report \u2013 4000 +\/- 10% (Introduction to Conclusion)<\/span><\/span><\/span><\/p>\n

 <\/span><\/p>\n

\u00a7  <\/span><\/span><\/span><\/span>Printing <\/span>Margins              <\/span>: LHS; RHS: 1 <\/span>Inch<\/span><\/span><\/p>\n

 <\/span><\/p>\n

\u00a7  <\/span><\/span><\/span><\/span>Binding <\/span>Margin                 <\/span>: \u00bd <\/span>Inch<\/span><\/span><\/p>\n

 <\/span><\/p>\n

\u00a7  <\/span><\/span><\/span><\/span>Header <\/span>and
\nFooter        <\/span>: 1 <\/span>Inch<\/span><\/span><\/p>\n

 <\/span><\/p>\n

\u00a7  <\/span><\/span><\/span><\/span>Printing                               <\/span>:
\nSingle Sided<\/span><\/span><\/p>\n

\u00a7 
\n<\/span><\/span><\/span><\/span>Basic <\/span>Font <\/span>Size                   <\/span>12<\/span><\/span><\/p>\n

 <\/span><\/p>\n

\u00a7  <\/span><\/span><\/span><\/span>Font <\/span>Style                           <\/span>: Arial\/Times New <\/span>Roman<\/span><\/span><\/p>\n

 <\/span><\/p>\n

\u00a7  <\/span><\/span><\/span><\/span>Presentation                    <\/span>:
\nBound Document<\/span><\/span><\/p>\n

 <\/span><\/p>\n

 <\/span><\/p>\n

 <\/p>\n

Important Information for Students<\/span><\/u><\/span><\/u><\/b><\/p>\n

\u00a7  <\/span><\/span><\/span><\/span>Please
\nnote that plagiarism <\/b>is treated as a serious offence and therefore the
\nwork you produce must be individual and original <\/b>although you may work
\nin groups in some instances (Please refer to Student Handbook on Plagiarism
\n& <\/span>Cheating).<\/span><\/span><\/p>\n

\u00a7 
\n<\/span><\/span><\/span><\/span>All <\/span>sources <\/span>of <\/span>information <\/span>must <\/span>be <\/span>referenced <\/span>using <\/span>\u201cHarvard <\/span>referencing<\/b>\u201d <\/span>where <\/span>a<\/span><\/span><\/p>\n

reference
\nlisting <\/span><\/b>should be included at the end of the assignment. References & citations
\nshould be within current 4 year period 2020-2024<\/span>.<\/span><\/p>\n

 <\/span><\/p>\n


<\/span><\/p>\n


<\/span><\/p>\n


<\/span><\/p>\n\n\n\n\n
\n

Level
\n 7<\/span><\/span><\/b><\/p>\n<\/td>\n

\n

80%-100%
\n (Distinction+)<\/span><\/span><\/b><\/p>\n<\/td>\n

\n

70%-79%
\n (Distinction)<\/span><\/span><\/b><\/p>\n<\/td>\n

\n

60%-79%
\n (Merit)<\/span><\/span><\/b><\/p>\n<\/td>\n

\n

50%-59%
\n (Pass)<\/span><\/span><\/b><\/p>\n<\/td>\n

\n

40%-49%
\n (Narrow Fail)<\/span><\/span><\/b><\/p>\n<\/td>\n

\n

20%-39%
\n (Clear Fail)<\/span><\/span><\/b><\/p>\n<\/td>\n

\n

 <\/span><\/b><\/p>\n<\/td>\n<\/tr>\n

\n

Overall Summary<\/span><\/b><\/p>\n<\/td>\n

\n

A full and detailed understanding of the set task
\n and an ability to have met the learning outcomes and address the assessment criteria
\n at an excellent level (80%-89%) or outstanding and exceptional (90%-100%) and
\n beyond level 7.<\/span><\/p>\n

Work is of a standard deemed worthy of publication\/
\n manufacture\/ public exhibition\/ Public performance<\/span><\/p>\n<\/td>\n

\n

A full and detailed understanding of the set task
\n and an ability to have met the learning outcomes and address the assessment
\n criteria at a very good level.<\/span><\/p>\n<\/td>\n

\n

A full understanding of the set task and an ability
\n to have met the learning outcomes and address the assessment criteria at a
\n good level<\/span><\/p>\n<\/td>\n

\n

A basic but secure understanding of the set task and
\n an ability to have met the associated learning outcomes and address the
\n assessment criteria at a threshold level. <\/span><\/p>\n<\/td>\n

\n

A partial understanding of the set task and an
\n ability to have met the associated learning outcomes and address the
\n assessment criteria at a limited and insufficient level. Unsatisfactory
\n overall. However, attainment is uneven with some learning outcomes not met
\n and some assessment criteria unaddressed. <\/span><\/p>\n<\/td>\n

\n

Unsatisfactory overall. A minimal understanding of
\n the set task and ability to have met some of the associated learning outcomes
\n at a basic level. However, attainment is uneven with many assessment criteria
\n unaddressed.<\/span><\/p>\n<\/td>\n

\n

Very poor, incomplete and or irrelevant. Demonstrate
\n a serious lack of comprehension and or engagement with the set task. May have
\n misunderstood the set task. No learning outcomes are me in full, although
\n there may be minimum attainment in one of two areas. <\/span><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\n

 <\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

General Information This course is assessed through submission of an individual investigative report. Information Systems Security Policies and Procedure (ISSPP) establish guidelines for the application of information security controls within an organization. It outlines what relevant stakeholders are expected to comply with while using company information assets. With the help of strong policies and procedures, […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","template":"","meta":[],"disciplines":[62],"paper_types":[],"tagged":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.writemyessays.app\/blog\/wp-json\/wp\/v2\/questions\/13378"}],"collection":[{"href":"https:\/\/www.writemyessays.app\/blog\/wp-json\/wp\/v2\/questions"}],"about":[{"href":"https:\/\/www.writemyessays.app\/blog\/wp-json\/wp\/v2\/types\/questions"}],"author":[{"embeddable":true,"href":"https:\/\/www.writemyessays.app\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.writemyessays.app\/blog\/wp-json\/wp\/v2\/comments?post=13378"}],"version-history":[{"count":0,"href":"https:\/\/www.writemyessays.app\/blog\/wp-json\/wp\/v2\/questions\/13378\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.writemyessays.app\/blog\/wp-json\/wp\/v2\/media?parent=13378"}],"wp:term":[{"taxonomy":"disciplines","embeddable":true,"href":"https:\/\/www.writemyessays.app\/blog\/wp-json\/wp\/v2\/disciplines?post=13378"},{"taxonomy":"paper_types","embeddable":true,"href":"https:\/\/www.writemyessays.app\/blog\/wp-json\/wp\/v2\/paper_types?post=13378"},{"taxonomy":"tagged","embeddable":true,"href":"https:\/\/www.writemyessays.app\/blog\/wp-json\/wp\/v2\/tagged?post=13378"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}