Security Program
As you build your model and plan, you have requested assistance from various organizations to identify their data and system requirements. To assist them, you have created a data classification scheme, and you would like them to use it when they are providing information about the systems.
During one of your interactions with a manager in a different department, the manager initially questioned the reasoning and benefit of performing the task and wondered why you were having him complete it. Take this opportunity to describe why management support is critical to the success of a security program, what reporting structure a security organization should follow, and what the organization should report. Finally, describe what methods you will use to report to management about the effectiveness of its program.
This will be included in the Security Program section of the Security Management Plan. The project deliverables for Week 2 are as follows:
• Section 2: Security Program
o Create a data classification scheme.
- Include at least 3 levels.
o Discuss the need for management support.
o Describe the security organization, including reporting structure.
o Discuss reporting methods that are used to inform management of the program status.