Title: Module 5 Objectives and Activities List
Course: IN 2001 Principle of Information Assurance > Section: Module 5: Chapter Five

Learning Objectives

By successfully completing this module, the student will be able to:

- Define management’s role in the development, maintenance, and enforcement of information security policy, standards, practices, procedures and guidelines
- Describe what an information security blueprint is, what its major components are and explain how it supports the information security program
- Discuss how an organization institutionalizes its policies, standards, and practices using education, training and awareness programs
- Explain what contingency planning is and how it relates to incident response planning, disaster recovery planning and business continuity

Learning Activities

- Read Chapter 5
- Read the Instructor notes

Chapter 5 presents a number of widely accepted security models and frameworks and examines the planning processes that support business continuity, disaster recovery and incident response.  It examines best business practices and standards of due care and due diligence and it offers an overview of the development of security policy.  This chapter details the major components, scope and target audience for each of the levels of security policy.  It also explains data classification schemes, both military and private, as well as the security education, training and awareness (SETA) program.  The chapter continues with an overview of logical technologies that aid in the design of an effective security blueprint and describes the organization’s role when involvement with outside law enforcement agencies becomes necessary.  Finally, the chapter examines the integration of security into the traditional systems development life cycle to ensure that systems developed in-house comply with the desired security profile.

Assessment Activities

- Complete Discussion Question 5
- Complete Exercise 5
- Complete Quiz 5