The Goals and Process of an Information Security Program

4. The Goals and Process of an Information Security Program

​​​​​​​Reflect on an information security program in your organization or an organization with which you are familiar.

• Describe the primary goals and process for developing      an information security program in that organization. Who should lead this      development and who manages the program? How will the information security      program policies and procedures be communicated to employees and enforced?      What are the applicable measurements and requirements for a successful      information security program?

5. Developing an Incident Response Plan 

​Reflect on a recent cyber security attack.

• Provide a brief overview of a potential incident      response plan requirements and processes that you would recommend. How      should the incident response plan be tested?