Information Assurance on Bill Brown:Thoughts and Reference Material Online

Building an Information Assurance Plan with ISO 27002

Thu, 14 May 2026 00:00:00 +0000

Building an Information Assurance Plan with ISO 27002

This proposal has been assembled to address the void of a Information Assurance (IA) program at the Heavy Metal Engineering (HME) Corporation. The proposal will layout an IA plan for HME that includes an overview of IA requirements and discusses the fundamentals of the of the IA approach. The proposal includes an approach to implementing the recommended framework and a risk mitigation strategy for the business. Methods for incident response in the case of an unwanted intrusion occurring will be covered. The last part of the proposal will cover the HME disaster recovery plan for the worldwide organization.

Trust, CIA Triad, and Safeguards in Information Security

Sat, 14 Mar 2026 00:00:00 +0000

Trust and Safeguards in Information Security: An Organizational Perspective

The word "Trust" is defined as related to information security. Based on ones understanding of securing your environment, what are some of the common safeguards is recommend to ensure trust is viable in an organization?

Defining Trust in Information Security

Trust as defined by Jacobs (2016) is a characteristic allowing one entity to assume that a second entity will behave exactly as the first entity expects. Trust can be viewed as assurance in the honesty, skill, character, and certainty of a person or thing.

Personnel and Physical Security in Information Assurance

Fri, 13 Mar 2026 00:00:00 +0000

Personnel and Physical Security in Information Assurance

Personnel Security

Process and procedures are needed to protect personnel security as Jacobs (2015) points out. The employee responsibilities need to be defined, and the employee must qualify for the role so that the risk is reduced from theft, fraud, or misuse of assets by the employee. An excellent example of checking personnel security or identities occurs in businesses that do work on behalf of the government. Each employee, visitor, supplier and any others that interact with the organization require having their identities checked and verified. In some cases, foreign personnel are unable to participate in specific meetings or able to conduct business in various parts of the building due to the sensitive nature of the information handled and discussed. Security policies and procedures for the organization identify what personnel can and cannot do including terminations or disciplinary action was taken for any wrongdoing as discussed by Jacobs (2015). Regular training by the organization is required do be sure team members are up to date with regulations and required constraints that need to be followed. At the time of employment as Jacobs (2015) a job description, already in place is provided to the employee, and the terms and conditions of the employment should be provided as defined by the human resources, compliance and legal teams. The job description should include any security roles and responsibilities required by the job candidate. A candidate background check and drug test also should be conducted before taking on a candidate for employment which will identify any past existing issues with the candidate. If the candidate is hired, the employment contract and nondisclosure agreement should be completed before any organizational assets are provided to the new employee.

Risk Management in Security Systems Engineering Explained

Thu, 12 Mar 2026 00:00:00 +0000

Risk Management as a Critical Element of Security Systems Engineering

Explain how Risk Management is a critical element to the Security Systems engineering. Also disucss how Risk Management is a critical component to the Security Systems engineering. Why is Risk Management a critical element of Security Systems engineering.

Defining Risk in Security Systems

Risk Management is a critical component of Security Systems engineering. To understand risk management, let's understand what risks are, vulnerabilities and threats are in relation to security systems. The combination of a threat combined with a vulnerability best defines risk within the realm of security as described by Bejtlich (2004).

Systems Engineering and Information Security in the SDLC

Wed, 05 Nov 2025 00:00:00 +0000

Systems Engineering and Information Security Integration in the Development Lifecycle

Topic: Systems Engineering and Information Security

Systems Engineering Overview

Systems engineering centers on defining the client's requirements and functionality early in the development cycle. Then one refines and documents the requirements that represent the needs. The method continues into design synthesis, development, system validation, deployment, operation, and retirement while considering the entire problem or also known as the system life cycle (Jacobs, 2016, p. 31). In short systems engineering is an interdisciplinary method to building complex and technologically diverse systems as described by Douglass (2016).

Information Assurance on Bill Brown:Thoughts and Reference Material Online

Building an Information Assurance Plan with ISO 27002

Building an Information Assurance Plan with ISO 27002

Trust, CIA Triad, and Safeguards in Information Security

Trust and Safeguards in Information Security: An Organizational Perspective

The word "Trust" is defined as related to information security. Based on ones understanding of securing your environment, what are some of the common safeguards is recommend to ensure trust is viable in an organization? (adsbygoogle = window.adsbygoogle || []).push({});

Defining Trust in Information Security

Personnel and Physical Security in Information Assurance

Personnel and Physical Security in Information Assurance

Personnel Security

Risk Management in Security Systems Engineering Explained

Risk Management as a Critical Element of Security Systems Engineering

Defining Risk in Security Systems

Systems Engineering and Information Security in the SDLC

Systems Engineering and Information Security Integration in the Development Lifecycle

Systems Engineering Overview

The word "Trust" is defined as related to information security. Based on ones understanding of securing your environment, what are some of the common safeguards is recommend to ensure trust is viable in an organization?