Security Best Practices - Case Study Example

The paper will discuss security best practices for these three topics mentioned above. It will also comment on papers that other students have written regarding this topic.
Information Security Officer
The first thing that every security program should do is establish the existence of the Information Security Officer (Putvinski 1). Relying on the size of a person’s security environment, this could be a current worker who has the accessibility to take on further duties or a full-time worker. Apart from the time element, a firm must clearly define the prospects of the Information Security Officer and determine whether a worker is capable of filling the role (Putvinski 1).
Vendor Management
A firm is only as strong and tough as its weakest link, and when the organization works with third-party contributors their information security collapse can become the organization’s issue. Organizations should ensure that they document which vendors get confidential information, in addition to how this information, is taken care of when in the position of the vendor (Putvinski 1). The lack of authoritarian vendor guidelines could raise the risk of releasing a client’s private information.
Physical Security
Documents do not storm out of the organization on their own. Having strict rules regarding who can physically access the offices, as well as how they gain entry, might decrease the possibility that an unauthorized person is present illegally to take information (Putvinski 1). The next step is to make sure that an organization documents how physical information is kept and destroyed.
Comments on Papers
Student 1
The issues discussed in student 1’s paper slightly resemble the findings in my paper. Student one talked about security issues about protecting information systems by incorporating security policies. Such a topic is extremely wide in the IT field, and I feel that the student could have explained further the types of policies that could be implemented to secure our information systems.
Student 2
The second student’s paper was extremely educative. The student focused on the diverse fields of security best practices touching over every security part that information systems involved. The paper also mentions some of the issues that I discussed in my paper such as physical security, vendor management, and information security officers. Such a paper would be extremely helpful to someone who, in particular, wants a summary of the findings on security best practices. Read More