Information Security Accountability Paper

Decent Essays
Information Security Accountability

The are three main areas of accountability when looking at the security of an organization. Whether is be a large corporation or a few person operation, each area to some degree is used by the organization. The three areas include I. T. security, information security and enterprise security (Gelbstein, 2013). I.T. security is security in place that protects an organizations information assets from non authorized person access in order to modify or remove. I. T. security in many cases is outsourced to a 3rd part vendor, especially with smaller companies. The functions of the department of vendor would be to ensure data is back-up in either a cloud or physical hardware other than just the computer

Related Documents

  • Improved Essays

    Nt1330 Unit 2

    • 369 Words
    • 2 Pages

    The business requirements of the access control must be established and documented. Access control rules and rights for each user or group of users should be clearly stated in a policy statement about access All employees, contractors and third party users of information systems and services should be required to record and report any allegations or findings of security weaknesses in the system or the services. This aims to ensure that information security events and weaknesses detection of information security can be dealt with in a timely and…

    • 369 Words
    • 2 Pages
    Improved Essays
  • Decent Essays

    Upon determining what should be in the intranet, what risk is the organization willing to tolerate should be tackled. An assessment of the privacy controls and security controls can be determined by using NIST Special Publication 800-53A: Assessing Security and Privacy Controls in Federal Information Systems and Organizations, Building Effective Assessment Plans as a guide along with NIST Special Publication 800-30, Rev-1, Guide for Conducting Risk Assessments (NIST SP 30-1, 800-53A). To truly understand this publication is prohibitive to fully explain; however, this step is critical and will impact your intranet dramatically. To simplify: you cannot always have the risk metric you desired because by doing so would make your system so slow and unusable you could not accomplish much.…

    • 428 Words
    • 2 Pages
    Decent Essays
  • Improved Essays

    Ba501 Week 1 Assignment

    • 740 Words
    • 3 Pages

    These studies might show labor hours needed, hardware and software costs, utility costs and prevention of data lost. Another aspect of computer security is disaster recovery, this might include damage caused by a natural or manmade occurrence. Computer equipment that is damaged might include sensitive information stored on hard drives and these would either need to be recovered or disposed of. The key decision makers in a security project would include: Chief Executive Officer: The most senior corporate officer reports to the board of directors.…

    • 740 Words
    • 3 Pages
    Improved Essays
  • Improved Essays

    HGC Case Study

    • 1025 Words
    • 4 Pages

    The security systems will be focused on management security, operational security and technical security controls. Management Security: These are management controls that will focus on the management of the IT security system and the management of risk for interconnected systems in HBWC environment, and includes techniques and concerns usually addressed by IT management. Operational Security: The operational controls address security methods focusing on mechanisms primarily implemented and executed by people (as opposed to systems). These controls are put in place to improve the security of a particular system (or group of systems). Often, they require technical or specialized expertise and rely upon management activities as well as technical controls.…

    • 1025 Words
    • 4 Pages
    Improved Essays
  • Improved Essays

    The Patriot Act was instated in 2002 after the tragic 9/11 event. Times have changed and so have the objectives of the Patriot Act. The government should not have the power of surveillance because it is not being used as intended and gives the US a bad reputation. The government should not have the power of surveillance because it is not being used as intended.…

    • 408 Words
    • 2 Pages
    Improved Essays
  • Improved Essays

    Component # 5: Accountability 1. The purpose of a results report is to ensure that the program was accurately evaluated which helps to find and make improvements. The data found is used to make sure the program is effective and make a personalized program. The 3 types of result reports are Curriculum, small group, and closing the gap results reports. These reports can include: whether or not the goals were appropriate; did the program support the goals; process data; perception data; and outcome data.…

    • 525 Words
    • 3 Pages
    Improved Essays
  • Improved Essays

    These safeguards include access control, audit controls, integrity controls, and transmission security (HSS.org). Access control requires a covered entity to implement policies and procedures to restrict a certain level of individuals from obtaining technical access to the electronic information. Audit controls must be implemented including but limited to hardware, software, and procedures to examine the access of electronic information and ensure the information is…

    • 1427 Words
    • 6 Pages
    Improved Essays
  • Improved Essays

    Their duties could consist of containment of the substance and then decontamination. Information analysis and infrastructure protection assist in the obtaining and analysis of intel or information, while infrastructure protection has to do with government buildings, utility companies, and banking institutions among other structures. Their role could consist of having contingencies in place when something catastrophic happens to any structure. Alternative structures would be assigned and made available to keep those parts of our country running and accessible. All these entities are part of the Department of Homeland Security, which is there to protect the citizens of the United States of…

    • 425 Words
    • 2 Pages
    Improved Essays
  • Improved Essays

    Accountability is what the United States Army revolves around. Without accountability the United States Army would be chaos. But I digress. The definition of accountability is the fact or condition of being accountable or held responsible. There is no progress within yourself, your team, your life without accountability.…

    • 754 Words
    • 4 Pages
    Improved Essays
  • Improved Essays

    Implementing an electronic health record (EHR) strategy for a medical organization has the potential, and capacity, to transform the enterprise. However, simply purchasing and installing an EHR is not enough to improve quality of care or enhance patient experiences. Leveraging advanced technology to full advantage requires extensive training, and for many providers, the learning curve is steep. Training physicians how to access, organize and share data is critical for successful implementation. Here are a few tips to ensure teaching programs cover all the basics and empower physicians and their teams to exploit key features of their organizations EHR.…

    • 806 Words
    • 4 Pages
    Improved Essays
  • Decent Essays

    Information security policy is to protect the data and assets. We can apply policies to the users. What to access and what not to access. These security policies can protect the networks, computers, applications of the company.…

    • 342 Words
    • 2 Pages
    Decent Essays
  • Improved Essays

    The standard definition when most people think of accountability or being accountable is accepting responsibility. Though this is true, to me accountability means: letting your actions rise above your excuses, overcome your fear and accept responsibility for the consequences you are accountable for. Accountability is liberating and requires a willingness to answer questions from those people affected by your actions. Accountability means to have the ability to follow through with your commitments you make for yourself or for others. It means honoring, exceeding, and improving standards.…

    • 1018 Words
    • 5 Pages
    Improved Essays
  • Superior Essays

    Routine Accountability Study

    • 3117 Words
    • 12 Pages

    This dissertation is about accountability in decision-making processes for routine and non-routine settings. The study identifies two research problems linked to each other. The first research problem is the disconnect in the public administration’s literature of the micro (individual) and macro (societal) levels of accountability (Dubnick, 2014) and the conceptualization of accountability primarily for routine contexts. The second research problem is a practical problem related to the individual experience of being accountable for the adoption of unfamiliar hazard mitigation measures in natural hazard mitigation plans.…

    • 3117 Words
    • 12 Pages
    Superior Essays
  • Decent Essays

    As more business activities are being automated and an increasing number of computers are being used to store sensitive information, the need for secure computer systems becomes more apparent. This need is even more apparent as systems and applications are being distributed and accessed via an insecure network, such as the Internet. The Internet itself has become critical for governments, companies, financial institutions, and millions of everyday users. Networks of computers support a multitude of activities whose loss would all but cripple these organizations. As a consequence, cybersecurity issues have become national security issues.…

    • 188 Words
    • 1 Pages
    Decent Essays
  • Improved Essays

    Good time management was very necessary so that I could always deliver the tasks on time and also live up to the professional expectations of my colleagues. Time management techniques are really important in an organization, because it will ultimately affect my performance. I had to understand each task that was given to me properly whilst recognizing the issues that could arise with it. This way, I always had a systematic approach to my work, which helped me become more efficient and thus would increase my work productivity. Sometimes when a few tasks were given to me that had to be completed in a short deadline, I had to have good organizational skills so that I could deliver on time.…

    • 964 Words
    • 4 Pages
    Improved Essays