Scribd Logo
Hochladen

Willkommen bei Scribd!

  • Setting Policy & Standard

    Hochgeladen von

    Himawan Reinaldy
    20 Ansichten7 Seiten
    This document outlines an information security management system (ISMS) framework. It discusses establishing security policies, standards, and procedures. The framework includes plans to identify assets, implement controls, monitor processes, and take corrective actions. It also discusses managing risks by reducing vulnerabilities and controlling threats. The enterprise security policy is categorized into groups and detailed through procedures and standards to govern security controls across the organization.

    Originalbeschreibung:

    Originaltitel

    Setting Policy & Standard.pptx

    Copyright

    © © All Rights Reserved

    Verfügbare Formate

    PPTX, PDF, TXT oder online auf Scribd lesen

    Stufen Sie dieses Dokument als nützlich ein?

    Sind diese Inhalte unangemessen?

    Dieses Dokument melden
    This document outlines an information security management system (ISMS) framework. It discusses establishing security policies, standards, and procedures. The framework includes plans to identify assets, implement controls, monitor processes, and take corrective actions. It also discusses managing risks by reducing vulnerabilities and controlling threats. The enterprise security policy is categorized into groups and detailed through procedures and standards to govern security controls across the organization.

    Copyright:

    © All Rights Reserved
    Als PPTX, PDF, TXT herunterladen oder online auf Scribd lesen
    Markieren Sie unangemessene Inhalte
    20 Ansichten7 Seiten

    Setting Policy & Standard

    Hochgeladen von

    Himawan Reinaldy
    This document outlines an information security management system (ISMS) framework. It discusses establishing security policies, standards, and procedures. The framework includes plans to identify assets, implement controls, monitor processes, and take corrective actions. It also discusses managing risks by reducing vulnerabilities and controlling threats. The enterprise security policy is categorized into groups and detailed through procedures and standards to govern security controls across the organization.

    Copyright:

    © All Rights Reserved
    Als PPTX, PDF, TXT herunterladen oder online auf Scribd lesen
    Markieren Sie unangemessene Inhalte
    von 7

    Setting Policy, Standard

    and Procedure
    IS POLICY

    SECURITY MANAGEMENT
    ORGANISATION REVIEW

    PLAN
    Establish
    ISMS

    DO
    ASSET Implement &
    ACT
    Maintain & CORRECTIVE &
    IDENTIFICATION Operate the PREVENTIVE
    & ISMS Improve ACTIONS
    CLASSIFICATION

    CHECK
    Monitor &
    Review ISMS

    CONTROL
    CHECK
    SELECTION &
    PROCESSES
    IMPLEMENTATION

    OPERATIONALIZ
    E THE PROCESES
    Risk relationships
    exploit
    Threats Vulnerabilities

    Risk
    reduce to Information
    Controls
    assets

    Security Value
    requirements
    Enterprise Security Policy Level 10

    Categorized into
    Policy Groups

    General Monitoring and Evaluation Operations Planning and Development Level 20

    Detailed by Abide by

    Procedures Level 30

    Referred by Abide by

    Standards Level 40

    Complimenting or used by
    Others: Forms, Logs, READMEs, Guides Level 50
    Security controls,
    including severity Enterprise
    classifications, will be Risk
    governed by Management
    Framework

    Enterprise Security Policy

    Policy Categories

    Standards

    Procedures
    Enterprise
    Business
    Continuity
    Management
    Security (and its related
    Framework
    processes) is essentially a
    subset of
    Lets Go To Implementation

    Das könnte Ihnen auch gefallen