Title: Module 12 Objectives and Activities List
Course: IN 2001 Principle of Information Assurance > Section: Module 12: Chapter 12

Learning Objectives

By successfully completing this module, the student will be able to:

- Discuss the need for ongoing maintenance of the information security program
- List the recommended security management models
- Define a model for a full maintenance program
- Identify the key factors involved in monitoring the external and internal environment
- Describe how planning, risk assessment, vulnerability assessment and remediation tie into information security maintenance
- Explain how to build readiness and review procedures into information security maintenance
- Define digital forensics, and describe the management of the digital forensics function
- Describe the process of acquiring, analyzing, and maintaining potential evidentiary material

Learning Activities

- Read Chapter 12
- Read Instructor Notes

The last and most important discussion addresses information security maintenance and change. Chapter 12 presents the ongoing technical and administrative evaluation of the security program.  This chapter explores ongoing risk analysis, risk evaluation, and measurement, all of which are part of risk management. From Internet penetration testing to wireless network risk assessment, this chapter explores the special considerations that must be taken to analyze the variety of vulnerabilities in an organization.

Assessment Activities

- Complete Discussion Question 12
- Complete Exercise 12
- Complete Quiz 12