BIT361 Security Management and Governance

Introduction 

Effective security management helps in reducing the risk of data breach and property loss. Concerning the statement, the discussion focus upon the importance of security management, how it benefits an organization (Sennewald and Baillie, 2020). Besides, it also focusses upon the individual involved in the process that can help to achieve an update and effective security management system to protect the data of the organization. The main aim of the report is to understand the security management of the “Moving fast supplies”. Besides, the discussion also aims to discuss the program implementation and understand its purpose and benefits within the organization. Although, the different roles and responsibilities of staffing structure related to information systems that help in providing better services within the business operations.

Purpose of a Security Management Program. 

Security management helps in enhancing the security facility of the company and also reduces the risk of any data breach. They also provide a clear course for all levels of workers in the organization structure (Admassie and Abebaw, 2021). With the help of security management, a safe physical environment can be maintained. The purpose of the security plan is to enhance and maintain the security of a licensed operation by evaluating security risks of the organization. There is an experiencing risk of cyber-attack which is an international and malicious effort by an organization or an individual system of another organization. Proper security system will not only reduces the risk of external attacks but will also help to minimize the internal security risks as in both of the case organization has to face severe difficulty. The company’s assess inventory for risk assessment so that weaknesses and potential risks are analyzed that are related to each asset. Although the company ensures the update of the app and new cybersecurity threats are removed and mitigated (Nugraha and Martin, 2021). For protecting the system the security management programs are updated against new vulnerabilities. Another major use of the security management plan is to explain the process by which the organization will deliver and maintain a harmless working environment and staff undertakings are managed. This helps in reducing the personal injury risk and loss of the property. Even security and policies and procedures are published and maintained. Enhancing and maintaining licensing operation security with the help of an adequate security plan.

Benefits derived from having Security Management Program as an ongoing process. 

The benefits of having a proper security management program are explained below. Digital, paper-based, intellectual property, secrets of the company, devices data and cloud information, hard copies, and personal information are different kinds of information involved in the business which is protected with the help of security management programs in moving fast supplies company (WysokiÅ„Å›ka-Senkus and Górna, 2021). In this, the whole organization is covered by the holistic approach standard and not only covered IT and people, whereas process, and technology are also encompassed. This helps the company and employees to mitigate risks and security control is embraced in regular working practices. A centrally managed framework is provided with the help of a security management program and keeps the information of the organization safe and managed in one place. Organization-wide protection is offered like risks involved in the technology are protected and procedures of staff are protected. Security threats are responded to effectively. In the external and internal of the organization, changes are developed which involve threats constantly that are reduced continuously. Even with the information security costs associated are reduced. Security management program risk assessment and analysis approach helps manage the business (Alshaikh and Adamson, 2021). At the time of defending technology, the organizations get help in reducing costs effectively. This program controls the cost and delivers cost-effective services which help in setting policies, procedures, technical and physical controls offered by security management programs. It helps in protecting the information which is confidential and has strong integrity. Cyber-attacks resilience is increased and this program is implemented and maintained so that resilience to cyber-attacks of an organization is increased.

Information security staffing structure:

In the case study, the staffing structure of information security is sales and consultancy, trained service and support professionals, and training staff. In the global area, sales branches are in different areas which involve 100 employees and it includes managers, installers, service personnel, ICT assistants, and installation assistants. An installation manager, accounts and finance manager, and sales manager are different managers. The proposed structures in information security are executive management. Besides, information security system professionals, data custodians, users, data owners, IS auditors (Mei, 2021). The proposed structure helps in providing better services to the company which protects the risk and threats involved in the system. The work is designated among different staff effectively so that communication will be done effectively and it will mitigate the issues. Effective Staffing structure is essential in the organization which helps in providing better services to their customers.

Description of the functions, tasks, roles, and responsibilities for each position:

There are different staff required in information security staffing structures are explained below.

Executive management: For information security responsibilities are assigned effectively. Specific roles in the organization are included like chief information security officer, chief technology officer, chief risk officer, chief security officer, and many more. For management of the information security strategy in the enterprise, these individuals are responsible to handle the executive level roles so those information assets are ensured to protect (Schulz et al., 2021). The management needs to look after the different functions involved in protecting the strategy.

Professionals involved in information system security: For designing, implementation, management, and reviewing baselines, procedures, policies, standards and guidelines of the organizations are managed by these professionals. IT risk management manager, IT security manager, Compliance manager, IT security analyst, and many more are the different professionals who will play their roles efficiently (Steinbart et al. 2018). Managers and analysts are involved in security professionals who handle the risk involved in all stages so that risks can be mitigated and deliver the products effectively.

Data owners: Data owners have budgetary authority and information owner systems are required to make sure that effective security in implemented (Olumuyiwa, 2021). The policy related to security in the organization is maintained and assessed which is implemented in the information systems in the coming future. These policies provide the right guidance to employees so they can manage the data of customers, clients, employees, company’s personal information handled effectively. Classification levels or sensitivity are appropriately determined and make sure that all levels or stages are managed accurately. Privileges are accessed accurately.

Data custodians: System or database custody functions managed by the owner of the systems. The operations or administration in a network manage the systems operations. The custodians of the data are given to the network administrator who secures the data and makes sure that their responsibilities are fulfilled effectively (Allens, Adams and Flack, 2019). While running a business the organization needs to secure the data in the system effectively which can be possible with the help of skilled data custodians which interact with other members so that business operations are managed efficiently.

Users: For using resources the users are responsible and preserve the available assets. Although personal, confidential, and integrated information and data, assets are used effectively by users (Ahmad et al., 2021). Even the security policy is adhered to as per the policy and it is their responsibility to adhering the assets.

IS auditors: Security objectives appropriateness is managed so that independent assurance is provided and it is the responsibility of IS auditors to manage it. The standards, policy, baselines, guidelines and procedures of security are determined and help in appropriate and effective security objectives managed within the organizations (Pura, 2017). IS auditors responsible for analyzing whether the decided objectives and controls are reliable for accomplishing or not.

Roles in terms of governance of security:

The functions of basic security governance are included: direct: from the perspective of strategies and risk management security structure are guided. Information security policies are developed and involved in the functions (Panchenko and Chernenko, 2021). The individuals or groups' roles are responsible for security governance and monitor the security management performance and indicate the position of the data and information. Senior management is responsible for protecting the policy and setting it as per the government policy and procedures which maintain the system structure. Executive management measures the metrics and indicates the need for software updating. Also, make sure to mitigate any risks so that data remains protected in the system of the organization.

Conclusion

Based on the above discussion, it can be concluded that Moving Fast Supplies supplies equipment that is utilized in logistics industries. The roles and responsibilities of different groups of employees which are involved in the information system is discussed. The above discussion helps to analyses the importance of an effective security management system in the company. In order to do that, the staffing structure is required which involves IT manager, Data auditor, user and others. Even the security management program is implemented and its purpose and benefits are identified and analyzed how it helps the business to protect the data.

References

Admassie, A. and Abebaw, D., 2021. Ethiopia-Land, Climate, Energy, Agriculture and Development: A Study in the Sudano-Sahel Initiative for Regional Development, Jobs, and Food Security.

Ahmad, A., Maynard, S.B., Motahhir, S. and Alshaikh, M., 2021. Teaching Information Security Management Using an Incident of Intellectual Property Leakage. arXiv preprint arXiv:2103.14838.

Allen, J., Adams, C. and Flack, F., 2019. The role of data custodians in establishing and maintaining social licence for health research. Bioethics, 33(4), pp.502-510.

Alshaikh, M. and Adamson, B., 2021. From awareness to influence: toward a model for improving employees’ security behaviour. Personal and Ubiquitous Computing, pp.1-13.

Mei, K., 2021, January. Computer network security countermeasures based on big data. In 2021 IEEE International Conference on Power Electronics, Computer Applications (ICPECA) (pp. 546-549). IEEE.

Nugraha, Y. and Martin, A.P., 2021. Towards a framework for trustworthy data security level agreement in cloud procurement. Computers and Security.

Olumuyiwa, E.A.C., Alternate mining security management.

Panchenko, V. and Chernenko, A., 2021, March. Economic Security Management of the Organization: System-Structural Approach. In International Conference on Economics, Law and Education Research (ELER 2021) (pp. 24-29). Atlantis Press.

Pura, R.A.H.M.A.N., 2017. Effects of auditor competence, information technology, accounting information systems and organizational commitment on auditors’ performances at the state audit agency, in south sulawesi.

Schulz, K., Karovič, V. and Veselý, P., 2021. Options to Improve the General Model of Security Management in Private Bank with GDPR Compliance. In Developments in Information & Knowledge Management for Business Applications (pp. 343-370). Springer, Cham.

Sennewald, C.A. and Baillie, C., 2020. Effective security management. Butterworth-Heinemann.

Steinbart, P.J., Raschke, R.L., Gal, G. and Dilla, W.N., 2018. The influence of a good relationship between the internal audit and information security functions on information security outcomes. Accounting, Organizations and Society, 71, pp.15-29.

WysokiÅ„Å›ka-Senkus, A. and Górna, J., 2021. Towards sustainable development: risk management for organizational security. Entrepreneurship and Sustainability Issues, 8(3), p.527.

We provide unmatched quality assignment writing services for all subjects in your curriculum. The most common subjects we cover include Maths, English, Humanities, Social Sciences, Management and more. Our experts have acquired their respective PhDs in specific disciplines from reputed universities. Tell us the subject you need ghostwriters for. We will assign a suitable ghostwriter accordingly. We are not restricted to writing assignments only. We also provide top-notch proofreading services and essay writing services. The essay writers are well-versed in all types of essays such as persuasive, expository, narrative, argumentative, persuasive, etc. Whether you need math homework help or English homework help, we have the right expert for you.