Title: Chapter 10 Overview
Course: IN 2001 Principle of Information Assurance > Section: Module 10: Chapter 10

Implementing Information Security

Introduction
The implementation phase is accomplished by changing the configuration and operation of the organization’s information systems to make them more secure.  This phase includes changes to:
- Procedures (through policy)
- People (through training)
- Hardware (through firewalls)
- Software (through encryption)
- Data (perhaps through classification)

During the implementation phase, the organization translates its blueprint for information security into a concrete project plan.  The project plan delivers instructions to the individuals who are executing the implementation.  These instructions focus on the security control changes needed to improve the security of the hardware, software, procedures, data and people that make up the organization’s information systems.
But before a project plan can be developed, management should have articulated and coordinated the information security vision and objectives involved in the execution of the plan.
Information Security Project Management
Technical Topics of Implementation
Nontechnical Aspects of Implementation
Information Systems Security Certification and Accreditation