NSA Cyber Security Profile - Research Paper Example

The assortment of the proper security controls for an information system is an essential duty that can have major ramifications on the functions and assets of an institution as well as the wellbeing of persons. Security controls are the organization, functional, and technical safeguard or counteractions prearranged for an information system to shield the confidentiality, integrity, and accessibility of the system and its data. Once implemented inside an information organism, security controls are examined to offer the data required to establish their general efficiency; that is, the degree to which the controls are carried out precisely, operating as intended, and creating the desired result with regard to meeting the security needs for the organism.

Knowing the general productivity of the security controls carried out in the information system and its environs of operation is important in establishing the risk to the institution’s functions and assets, to persons, to other institutions, and the to the country resultant from the utilization of the system. The purpose of this paper is to offer guidelines for creating effectual security scrutiny plans and a comprehensive set of proceedings for examining the effectiveness of security controls implemented in the information systems (Gallagher & Locke, 2010) Security assessments can be effectively implemented at some phases in the organism development life cycle to expand the grounds for assurance that the security controls engaged inside or inherited by a data system are effective in their application.

For instance, data system developers frequently carry security assessments and system integrators at the development and implementation stages of life cycle to assist make sure that the needed security controls for the organism, and/or system are appropriately intended and developed (Department of Defense, 2006). Assessment activities in the original system development life phase can be revolved more quickly mode before proceeding to succeeding phases in the life cycle. Examiners receive the needed proof during the scrutiny process to permit the proper institutional officials to make objectivity establishment about the effectiveness